2023 CVEs (page 23)
Page 23 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-47849 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Blossom Themes BlossomThemes Email Newsletter blossomthemes-email-newsletter allows Exploiting Incorrectly Configured Ac… |
CVE-2023-47847 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu allows Exploiting Incorrectly Configured Access Contro… |
CVE-2023-47841 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Analytify Analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify… |
CVE-2023-47838 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Jules Colle Conditional Fields for Contact Form 7 cf7-conditional-fields allows Exploiting Incorrectly Configured Access… |
CVE-2023-47836 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in prasadkirpekar WP Meta and Date Remover wp-meta-and-date-remover allows Exploiting Incorrectly Configured Access Control… |
CVE-2023-47832 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in SearchIQ SearchIQ searchiq allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Se… |
CVE-2023-47830 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Addons for Contact Form 7 Live Preview for Contact Form 7 allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2023-47826 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2023-47823 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in nCrafts FormCraft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FormCraft… |
CVE-2023-47822 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Contr… |
CVE-2023-47820 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in CRUDLab WP Like Button allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Lik… |
CVE-2023-47805 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCa… |
CVE-2023-47793 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Acme Themes Acme Fix Images acme-fix-images allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-47780 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in flowdee EasyAzon easyazon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eas… |
CVE-2023-47776 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Exploiting Incorrectly Configured Access Contr… |
CVE-2023-47764 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in metaphorcreations Ditty ditty-news-ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-47763 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured A… |
CVE-2023-47762 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WPDeveloper BetterDocs betterdocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-47761 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WPDeveloper Simple 301 Redirects by BetterLinks simple-301-redirects allows Exploiting Incorrectly Configured Access Con… |
CVE-2023-47760 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-47756 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in David Vongries Welcome Email Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-47698 | High | 8.6 | 2024-12-09 | Missing Authorization vulnerability in shohei.tanaka Japanized For WooCommerce woocommerce-for-japan allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2023-47694 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in appsbd Mini Cart Drawer For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-32299 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Sales Report ni-woocommerce-sales-report allows Exploiting Incorrectly Configured Access Cont… |
CVE-2023-32293 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Realwebcare WRC Pricing Tables allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-32126 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WPoperation SALERT allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALERT: fr… |
CVE-2023-32117 | Critical | 9.8 | 2024-12-09 | Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-32094 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Felix Welberg Extended Post Status allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-31214 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-31073 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Jose Vega Display custom fields in the frontend – Post and User Profile Fields allows Exploiting Incorrectly Configured… |
CVE-2023-30873 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs… |
CVE-2023-30870 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in wooproductimporter Sharkdropship for AliExpress Dropship and Affiliate allows Exploiting Incorrectly Configured Access C… |
CVE-2023-30783 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in YummyWP Smart WooCommerce Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-30748 | Medium | 4.3 | 2024-12-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This is… |
CVE-2023-30488 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2023-30486 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: fro… |
CVE-2023-30479 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Stamped.io Stamped.io Product Reviews & UGC for WooCommerce allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-30476 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Sparkle Themes Blogger Buzz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B… |
CVE-2023-29433 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in 腾讯云 tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentc… |
CVE-2023-29431 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2023-29429 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WPEverest User Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects U… |
CVE-2023-29422 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in AlexaCRM Dynamics 365 Integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-29239 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in LuckyWP LuckyWP Scripts Control allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-29237 | Medium | 6.3 | 2024-12-09 | Missing Authorization vulnerability in Muhammad Rehman Remove Duplicate Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-29173 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in AWESOME TOGI Product Category Tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-28689 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job… |
CVE-2023-28688 | Medium | 5.4 | 2024-12-09 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeHunk TH Variation Swatches allows Cross Site Request Forgery.This issue affects TH Variation Swatches… |
CVE-2023-28536 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Acato Branded Social Images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B… |
CVE-2023-28532 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in wpdirectorykit.com Real Estate Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2023-28417 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in AlexaCRM Dynamics 365 Integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-28416 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Sparkle Themes Chankhe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chankh… |
CVE-2023-28168 | Low | 3.7 | 2024-12-09 | Missing Authorization vulnerability in Jerod Santo WordPress Console allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-28165 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Tech Banker Backup Bank: WordPress Backup Plugin allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-27626 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Aleksandar Urošević Stock Ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-27625 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Paul Ryley Site Reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site… |
CVE-2023-27454 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Apollo13Themes Rife Elementor Extensions & Templates allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2023-27449 | Medium | 6.3 | 2024-12-09 | Missing Authorization vulnerability in TotalSuite Total Poll Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects To… |
CVE-2023-27428 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Damir Calusic WP users media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-26522 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in OneWebsite WP Repost allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Repos… |
CVE-2023-26520 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-25993 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WebberZone Top 10 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Top 10: fro… |
CVE-2023-25966 | Medium | 5.5 | 2024-12-09 | Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird… |
CVE-2023-25959 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Apollo13Themes Apollo13 Framework Extensions allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2023-25791 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Cadus Pro Fontiran allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fontiran… |
CVE-2023-25714 | High | 7.5 | 2024-12-09 | Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-25703 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Meta slider and carousel with lightbox allows Exploiting Incorrectly Configured Acces… |
CVE-2023-25486 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a… |
CVE-2023-25469 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Magazine3 Easy Table of Contents allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-25455 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Exploiting Incorrectly Config… |
CVE-2023-25454 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in Nate Reist Protected Posts Logout Button allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2023-25067 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Noah Hearle, Design Extreme We’re Open! allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-25060 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Album and Image Gallery plus Lightbox allows Exploiting Incorrectly Configured Access… |
CVE-2023-25048 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Fantastic Plugins Fantastic Content Protector Free allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2023-25037 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in CodePeople Booking Calendar Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2023-25035 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in Fullworks Quick Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-25026 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in PayPal PayPal Brasil para WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-24407 | Medium | 5.0 | 2024-12-09 | Missing Authorization vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2023-24375 | Low | 3.5 | 2024-12-09 | Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Exploiting Incorrectly Config… |
CVE-2023-23986 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Noah Hearle, Design Extreme Reviews and Rating – Google My Business allows Exploiting Incorrectly Configured Access Cont… |
CVE-2023-23975 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Fullworks Quick Event Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-23895 | Medium | 4.7 | 2024-12-09 | Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-23893 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Igor Benic Simple Giveaways allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S… |
CVE-2023-23887 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Shaon Easy Google Analytics for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-23886 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in mg12 WP-RecentComments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Rec… |
CVE-2023-23868 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in WPFactory Cost of Goods for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-23834 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spec… |
CVE-2023-23825 | Low | 3.1 | 2024-12-09 | Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spec… |
CVE-2023-23823 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Clever Widgets Enhanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-23814 | Low | 3.8 | 2024-12-09 | Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2023-23726 | Medium | 5.4 | 2024-12-09 | Cross-Site Request Forgery (CSRF) vulnerability in Tickera.com Tickera allows Cross Site Request Forgery.This issue affects Tickera: from n/a through 3.5.1.0. |
CVE-2023-23725 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Chris Baldelomar Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S… |
CVE-2023-23716 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-23715 | Medium | 5.2 | 2024-12-09 | Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2023-22708 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Karim Salman Kraken.io Image Optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-22701 | High | 7.5 | 2024-12-09 | Missing Authorization vulnerability in Shopfiles Ltd Ebook Store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ebo… |
CVE-2023-50913 | Critical | 9.1 | 2024-12-05 | Oxide control plane software before 5 allows SSRF. |
CVE-2023-48010 | Critical | 9.8 | 2024-12-05 | STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as Supervisor on the SPC58 PowerPC microc… |
CVE-2023-6978 | Medium | 6.1 | 2024-12-04 | The WP Job Manager – Company Profiles plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'company' parameter in all versions up to, a… |
CVE-2023-52944 | Medium | 4.3 | 2024-12-04 | Incorrect authorization vulnerability in ActionRule webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authentic… |
CVE-2023-52943 | Medium | 4.3 | 2024-12-04 | Incorrect authorization vulnerability in Alert.Setting webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authen… |