2023 CVEs (page 23)
Page 23 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-51353 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-50904 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-50903 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Roxnor Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metfor… |
CVE-2023-50899 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Con… |
CVE-2023-50887 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-50884 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Contr… |
CVE-2023-50882 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-50877 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in woobewoo Product Filter by WBW allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-50876 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Molongui Molongui allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Molongui: f… |
CVE-2023-50375 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in edo888 Google Language Translator google-language-translator allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2023-50373 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WPSAAD Alt Manager alt-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-49861 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in socialmediafeather Social Media Feather social-media-feather allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2023-49859 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Marcus (aka @msykes) Login With Ajax login-with-ajax allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2023-49858 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Austin Custom Login custom-login allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-49857 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2023-49856 | High | 8.1 | 2024-12-09 | Missing Authorization vulnerability in EDGARROJAS Smart Forms smart-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-49851 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in ILMDESIGNS Square Thumbnails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-49850 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-49849 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-49848 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in Marc dooder Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy woo-aliexpress-dropshipping allows Exploiting… |
CVE-2023-49845 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in mattdeclaire Redirects redirects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-49835 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-49832 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-49831 | High | 7.5 | 2024-12-09 | Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Exploiting Incorrectly Confi… |
CVE-2023-49818 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Webflow Webflow Pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webflow… |
CVE-2023-49817 | High | 8.2 | 2024-12-09 | Missing Authorization vulnerability in heoLixfy Flexible Woocommerce Checkout Field Editor allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2023-49758 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Roland Murg WP Booking System wp-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-49757 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2023-49756 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Arraytics Eventin wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-49755 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in B.M. Rafiul Alam Elementor Timeline Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-49754 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Yogesh Pawar Bulk Edit Post Titles bulk-edit-post-titles allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2023-49196 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Pagelayer Team PageLayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page… |
CVE-2023-49194 | Medium | 5.3 | 2024-12-09 | Insertion of Sensitive Information Into Debugging Code vulnerability in importify Importify (Dropshipping WooCommerce) importify allows Retrieve Embedded Sensi… |
CVE-2023-49193 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in NerdPress Hubbub Lite social-pug allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-49192 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in cl272 Enhanced Text Widget enhanced-text-widget allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-49167 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in code4life Database for CF7 database-for-cf7 allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-49158 | High | 7.1 | 2024-12-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Binh Nguyen LadiApp ladipage allows Stored XSS.This issue… |
CVE-2023-49156 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in GoDaddy GoDaddy Email Marketing godaddy-email-marketing-sign-up-forms allows Exploiting Incorrectly Configured Access Co… |
CVE-2023-49154 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Wow-Company Button Generator – easily Button Builder allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2023-48779 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in 3DWeb 360 Javascript Viewer 360deg-javascript-viewer allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2023-48776 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in virtuellwerk canvasio3D Light canvasio3d-light allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2023-48774 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Martin Gibson IdeaPush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPu… |
CVE-2023-48750 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in voidthemes Void Elementor Post Grid Addon for Elementor Page builder void-elementor-post-grid-addon-for-elementor-page-b… |
CVE-2023-48740 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Sajid Javed Easy Social Feed easy-facebook-likebox allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2023-48332 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Varun Sharma Mail Bank - #1 Mail SMTP Plugin for WordPress wp-mail-bank allows Exploiting Incorrectly Configured Access… |
CVE-2023-48324 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2023-48287 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Matat Technologies TextMe SMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-48286 | High | 8.2 | 2024-12-09 | Missing Authorization vulnerability in mra13 Stripe Payments stripe-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-48277 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in SuperPWA Super Progressive Web Apps super-progressive-web-apps allows Exploiting Incorrectly Configured Access Control S… |
CVE-2023-48274 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in Mondial Relay WooCommerce - WCMultiShipping WCMultiShipping allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-47871 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in IT Path Solutions Contact Form to Any API allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-47869 | Medium | 4.3 | 2024-12-09 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Code Injection.This issue affe… |
CVE-2023-47849 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Blossom Themes BlossomThemes Email Newsletter blossomthemes-email-newsletter allows Exploiting Incorrectly Configured Ac… |
CVE-2023-47847 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu allows Exploiting Incorrectly Configured Access Contro… |
CVE-2023-47841 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Analytify Analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify… |
CVE-2023-47838 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Jules Colle Conditional Fields for Contact Form 7 cf7-conditional-fields allows Exploiting Incorrectly Configured Access… |
CVE-2023-47836 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in prasadkirpekar WP Meta and Date Remover wp-meta-and-date-remover allows Exploiting Incorrectly Configured Access Control… |
CVE-2023-47832 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in SearchIQ SearchIQ searchiq allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Se… |
CVE-2023-47830 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Addons for Contact Form 7 Live Preview for Contact Form 7 allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2023-47826 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2023-47823 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in nCrafts FormCraft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FormCraft… |
CVE-2023-47822 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Contr… |
CVE-2023-47820 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in CRUDLab WP Like Button allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Lik… |
CVE-2023-47805 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCa… |
CVE-2023-47793 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Acme Themes Acme Fix Images acme-fix-images allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-47780 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in flowdee EasyAzon easyazon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eas… |
CVE-2023-47776 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Exploiting Incorrectly Configured Access Contr… |
CVE-2023-47764 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in metaphorcreations Ditty ditty-news-ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-47763 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured A… |
CVE-2023-47762 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WPDeveloper BetterDocs betterdocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-47761 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WPDeveloper Simple 301 Redirects by BetterLinks simple-301-redirects allows Exploiting Incorrectly Configured Access Con… |
CVE-2023-47760 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-47756 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in David Vongries Welcome Email Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-47698 | High | 8.6 | 2024-12-09 | Missing Authorization vulnerability in shohei.tanaka Japanized For WooCommerce woocommerce-for-japan allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2023-47694 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in appsbd Mini Cart Drawer For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-32299 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Sales Report ni-woocommerce-sales-report allows Exploiting Incorrectly Configured Access Cont… |
CVE-2023-32293 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Realwebcare WRC Pricing Tables allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-32126 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WPoperation SALERT allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALERT: fr… |
CVE-2023-32117 | Critical | 9.8 | 2024-12-09 | Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-32094 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Felix Welberg Extended Post Status allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-31214 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-31073 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Jose Vega Display custom fields in the frontend – Post and User Profile Fields allows Exploiting Incorrectly Configured… |
CVE-2023-30873 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs… |
CVE-2023-30870 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in wooproductimporter Sharkdropship for AliExpress Dropship and Affiliate allows Exploiting Incorrectly Configured Access C… |
CVE-2023-30783 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in YummyWP Smart WooCommerce Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-30748 | Medium | 4.3 | 2024-12-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This is… |
CVE-2023-30488 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2023-30486 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: fro… |
CVE-2023-30479 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Stamped.io Stamped.io Product Reviews & UGC for WooCommerce allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-30476 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Sparkle Themes Blogger Buzz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B… |
CVE-2023-29433 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in 腾讯云 tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentc… |
CVE-2023-29431 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2023-29429 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WPEverest User Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects U… |
CVE-2023-29422 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in AlexaCRM Dynamics 365 Integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-29239 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in LuckyWP LuckyWP Scripts Control allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-29237 | Medium | 6.3 | 2024-12-09 | Missing Authorization vulnerability in Muhammad Rehman Remove Duplicate Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-29173 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in AWESOME TOGI Product Category Tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-28689 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job… |
CVE-2023-28688 | Medium | 5.4 | 2024-12-09 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeHunk TH Variation Swatches allows Cross Site Request Forgery.This issue affects TH Variation Swatches… |
CVE-2023-28536 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Acato Branded Social Images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B… |