2023 CVEs (page 22)
Page 22 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-35875 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Jegstudio Gutenverse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenver… |
CVE-2023-35777 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in The Events Calendar The Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-35052 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in wpWax - WP Business Directory Plugin and Classified Listings Directory Directorist allows Exploiting Incorrectly Configu… |
CVE-2023-35051 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-35046 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Dynamic.ooo Dynamic Visibility for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2023-35037 | High | 7.6 | 2024-12-13 | Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfe… |
CVE-2023-34387 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-34381 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Gesundheit Bewegt GmbH Zippy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-34376 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Rextheme Change WooCommerce Add To Cart Button Text allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2023-34019 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-34014 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in G5Theme Grid Plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grid Plus… |
CVE-2023-34009 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Inisev Social Media & Share Icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-33998 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in cybernetikz Easy Social Icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-33996 | High | 8.8 | 2024-12-13 | Missing Authorization vulnerability in СleanTalk - Anti-Spam Protection Spam protection, AntiSpam, FireWall by CleanTalk allows Exploiting Incorrectly Configur… |
CVE-2023-33995 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-33994 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in VeronaLabs Slimstat Analytics wp-slimstat allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-33928 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in WebToffee WordPress Backup & Migration allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-33324 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in wppal Easy Captcha allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Captc… |
CVE-2023-33215 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Taggbox Taggbox taggbox-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-32963 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in a3rev Software WooCommerce Predictive Search allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2023-32798 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in 10up Simple Page Ordering allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sim… |
CVE-2023-32601 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Booking Ultra Pro Booking Ultra Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-32599 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Bill Minozzi reCAPTCHA for all allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-32593 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in GS Plugins GS Pins for Pinterest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-32586 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Thomas Michalak Soundcloud Is Gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-32585 | High | 7.5 | 2024-12-13 | Missing Authorization vulnerability in Total-Soft Portfolio Gallery – Responsive Image Gallery allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2023-32581 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in MobileMonkey WP-Chatbot for Messenger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-32574 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Fahad Mahmood Injection Guard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-32520 | High | 7.5 | 2024-12-13 | Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP… |
CVE-2023-32519 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP… |
CVE-2023-32507 | High | 7.3 | 2024-12-13 | Missing Authorization vulnerability in wp3sixty Woo Custom Emails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wo… |
CVE-2023-32506 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in Link Whisper Link Whisper Free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-30490 | High | 7.5 | 2024-12-13 | Missing Authorization vulnerability in Matthew Ruddy Easing Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-28990 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in HashThemes Viral Mag allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Viral Ma… |
CVE-2023-27456 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in HashThemes Total allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total: from… |
CVE-2023-25988 | High | 7.5 | 2024-12-13 | Missing Authorization vulnerability in Video Gallery by Total-Soft Video Gallery – YouTube Gallery allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-22697 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Survey Maker team Survey Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-23472 | Low | 3.1 | 2024-12-11 | IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain sensitive information that could aid in… |
CVE-2023-37395 | Low | 2.5 | 2024-12-11 | IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data. |
CVE-2023-6947 | High | 7.7 | 2024-12-10 | The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.26. This mak… |
CVE-2023-43962 | Medium | 4.8 | 2024-12-09 | Cross Site Scripting vulnerability in Xunrui CMS Public Edition v.4.6.1 allows a remote attacker to execute arbitrary code via the project name function in the… |
CVE-2023-7298 | Medium | 4.4 | 2024-12-09 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulne… |
CVE-2023-41953 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from n/a through 4.13.1. |
CVE-2023-51362 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-51360 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-51359 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-51357 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Access Contr… |
CVE-2023-51355 | High | 8.2 | 2024-12-09 | Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2023-51353 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-50904 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-50903 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Roxnor Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metfor… |
CVE-2023-50899 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Con… |
CVE-2023-50887 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-50884 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Contr… |
CVE-2023-50882 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-50877 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in woobewoo Product Filter by WBW allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-50876 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Molongui Molongui allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Molongui: f… |
CVE-2023-50375 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in edo888 Google Language Translator google-language-translator allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2023-50373 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WPSAAD Alt Manager alt-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-49861 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in socialmediafeather Social Media Feather social-media-feather allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2023-49859 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Marcus (aka @msykes) Login With Ajax login-with-ajax allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2023-49858 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Austin Custom Login custom-login allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-49857 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2023-49856 | High | 8.1 | 2024-12-09 | Missing Authorization vulnerability in EDGARROJAS Smart Forms smart-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-49851 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in ILMDESIGNS Square Thumbnails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-49850 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-49849 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-49848 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in Marc dooder Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy woo-aliexpress-dropshipping allows Exploiting… |
CVE-2023-49845 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in mattdeclaire Redirects redirects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-49835 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-49832 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-49831 | High | 7.5 | 2024-12-09 | Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Exploiting Incorrectly Confi… |
CVE-2023-49818 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Webflow Webflow Pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webflow… |
CVE-2023-49817 | High | 8.2 | 2024-12-09 | Missing Authorization vulnerability in heoLixfy Flexible Woocommerce Checkout Field Editor allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2023-49758 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Roland Murg WP Booking System wp-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-49757 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2023-49756 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Arraytics Eventin wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-49755 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in B.M. Rafiul Alam Elementor Timeline Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-49754 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Yogesh Pawar Bulk Edit Post Titles bulk-edit-post-titles allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2023-49196 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Pagelayer Team PageLayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page… |
CVE-2023-49194 | Medium | 5.3 | 2024-12-09 | Insertion of Sensitive Information Into Debugging Code vulnerability in importify Importify (Dropshipping WooCommerce) importify allows Retrieve Embedded Sensi… |
CVE-2023-49193 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in NerdPress Hubbub Lite social-pug allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-49192 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in cl272 Enhanced Text Widget enhanced-text-widget allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-49167 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in code4life Database for CF7 database-for-cf7 allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-49158 | High | 7.1 | 2024-12-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Binh Nguyen LadiApp ladipage allows Stored XSS.This issue… |
CVE-2023-49156 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in GoDaddy GoDaddy Email Marketing godaddy-email-marketing-sign-up-forms allows Exploiting Incorrectly Configured Access Co… |
CVE-2023-49154 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Wow-Company Button Generator – easily Button Builder allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2023-48779 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in 3DWeb 360 Javascript Viewer 360deg-javascript-viewer allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2023-48776 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in virtuellwerk canvasio3D Light canvasio3d-light allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2023-48774 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Martin Gibson IdeaPush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPu… |
CVE-2023-48750 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in voidthemes Void Elementor Post Grid Addon for Elementor Page builder void-elementor-post-grid-addon-for-elementor-page-b… |
CVE-2023-48740 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Sajid Javed Easy Social Feed easy-facebook-likebox allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2023-48332 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Varun Sharma Mail Bank - #1 Mail SMTP Plugin for WordPress wp-mail-bank allows Exploiting Incorrectly Configured Access… |
CVE-2023-48324 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2023-48287 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Matat Technologies TextMe SMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-48286 | High | 8.2 | 2024-12-09 | Missing Authorization vulnerability in mra13 Stripe Payments stripe-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-48277 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in SuperPWA Super Progressive Web Apps super-progressive-web-apps allows Exploiting Incorrectly Configured Access Control S… |
CVE-2023-48274 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in Mondial Relay WooCommerce - WCMultiShipping WCMultiShipping allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-47871 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in IT Path Solutions Contact Form to Any API allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-47869 | Medium | 4.3 | 2024-12-09 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Code Injection.This issue affe… |