2023 CVEs (page 29)
Page 29 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-49111 | Medium | 6.5 | 2024-06-20 | For Kiuwan installations with SSO (single sign-on) enabled, an unauthenticated reflected cross-site scripting attack can be performed on the login page "logi… |
CVE-2023-49110 | High | 7.2 | 2024-06-20 | When the Kiuwan Local Analyzer uploads the scan results to the Kiuwan SAST web application (either on-premises or cloud/SaaS solution), the transmitted data … |
CVE-2023-52883 | High | 7.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible null pointer dereference abo->tbo.resource may be NULL in amdgpu… |
CVE-2023-25646 | High | 7.1 | 2024-06-20 | There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can u… |
CVE-2023-3204 | Medium | 6.5 | 2024-06-20 | The Materialis theme for WordPress is vulnerable to limited arbitrary options updates in versions up to, and including, 1.1.24. This is due to missing authoriz… |
CVE-2023-39312 | Critical | 9.1 | 2024-06-19 | Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1. |
CVE-2023-38394 | Medium | 5.4 | 2024-06-19 | Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0. |
CVE-2023-38393 | High | 7.6 | 2024-06-19 | Missing Authorization vulnerability in Saturday Drive Ninja Forms.This issue affects Ninja Forms: from n/a through 3.6.25. |
CVE-2023-36516 | High | 7.6 | 2024-06-19 | Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3. |
CVE-2023-36515 | High | 7.3 | 2024-06-19 | Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3. |
CVE-2023-25697 | Medium | 5.4 | 2024-06-19 | Cross-Site Request Forgery (CSRF) vulnerability in GamiPress.This issue affects GamiPress: from n/a through 2.5.6. |
CVE-2023-39310 | Medium | 5.4 | 2024-06-19 | Missing Authorization vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1. |
CVE-2023-37872 | Medium | 6.5 | 2024-06-19 | Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3… |
CVE-2023-37869 | Medium | 6.5 | 2024-06-19 | Missing Authorization vulnerability in Premium Addons Premium Addons PRO.This issue affects Premium Addons PRO: from n/a through 2.9.0. |
CVE-2023-36684 | High | 7.1 | 2024-06-19 | Missing Authorization vulnerability in Brainstorm Force Convert Pro.This issue affects Convert Pro: from n/a through 1.7.5. |
CVE-2023-36683 | Medium | 6.5 | 2024-06-19 | Missing Authorization vulnerability in WP SCHEMA PRO Schema Pro.This issue affects Schema Pro: from n/a through 2.7.8. |
CVE-2023-36676 | Medium | 5.4 | 2024-06-19 | Missing Authorization vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6. |
CVE-2023-41805 | Medium | 6.5 | 2024-06-19 | Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates astra-sites.This issue affects Premium St… |
CVE-2023-39998 | High | 8.2 | 2024-06-19 | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 27.1.1. |
CVE-2023-39993 | Medium | 4.3 | 2024-06-19 | Missing Authorization vulnerability in Wpmet Elements kit Elementor addons.This issue affects Elements kit Elementor addons: from n/a through 2.9.0. |
CVE-2023-39990 | Medium | 5.4 | 2024-06-19 | Missing Authorization vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 1.2.3. |
CVE-2023-39922 | Medium | 4.3 | 2024-06-19 | Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1. |
CVE-2023-38386 | High | 7.6 | 2024-06-19 | Missing Authorization vulnerability in Saturday Drive Ninja Forms.This issue affects Ninja Forms: from n/a through 3.6.25. |
CVE-2023-37870 | High | 8.1 | 2024-06-19 | Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.1.9. |
CVE-2023-36512 | Medium | 6.5 | 2024-06-19 | Missing Authorization vulnerability in Woo AutomateWoo.This issue affects AutomateWoo: from n/a through 5.7.5. |
CVE-2023-35050 | Medium | 5.4 | 2024-06-19 | Missing Authorization vulnerability in Elementor Elementor Pro.This issue affects Elementor Pro: from n/a through 3.13.0. |
CVE-2023-35049 | High | 7.5 | 2024-06-19 | Missing Authorization vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7… |
CVE-2023-47770 | High | 7.6 | 2024-06-19 | Missing Authorization vulnerability in Muffin Group Betheme.This issue affects Betheme: from n/a through 27.1.1. |
CVE-2023-47681 | Medium | 6.5 | 2024-06-19 | Missing Authorization vulnerability in QuadLayers WooCommerce Checkout Manager.This issue affects WooCommerce Checkout Manager: from n/a through 7.3.0. |
CVE-2023-46148 | High | 8.8 | 2024-06-19 | Missing Authorization vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a through 7.3.5. |
CVE-2023-46146 | High | 8.3 | 2024-06-19 | Missing Authorization vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a through 7.3.5. |
CVE-2023-45658 | High | 7.6 | 2024-06-19 | Missing Authorization vulnerability in POSIMYTH Nexter.This issue affects Nexter: from n/a through 2.0.3. |
CVE-2023-44151 | Medium | 5.4 | 2024-06-19 | Missing Authorization vulnerability in Brainstorm Force Pre-Publish Checklist.This issue affects Pre-Publish Checklist: from n/a through 1.1.1. |
CVE-2023-44148 | Medium | 5.4 | 2024-06-19 | Missing Authorization vulnerability in Brainstorm Force Astra Bulk Edit.This issue affects Astra Bulk Edit: from n/a through 1.2.7. |
CVE-2023-40608 | High | 8.2 | 2024-06-19 | Missing Authorization vulnerability in Paid Memberships Pro Paid Memberships Pro CCBill Gateway.This issue affects Paid Memberships Pro CCBill Gateway: from n/… |
CVE-2023-40004 | High | 7.3 | 2024-06-19 | Missing Authorization vulnerability in ServMask All-in-One WP Migration Box Extension, ServMask All-in-One WP Migration OneDrive Extension, ServMask All-in-One… |
CVE-2023-48761 | Medium | 6.3 | 2024-06-19 | Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.13. |
CVE-2023-48760 | High | 8.2 | 2024-06-19 | Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.13. |
CVE-2023-48759 | High | 7.5 | 2024-06-19 | Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.13. |
CVE-2023-47788 | Medium | 4.3 | 2024-06-19 | Missing Authorization vulnerability in Automattic Jetpack.This issue affects Jetpack: from n/a before 12.7. |
CVE-2023-47783 | High | 8.3 | 2024-06-19 | Missing Authorization vulnerability in Thrive Themes Thrive Theme Builder.This issue affects Thrive Theme Builder: from n/a before 3.24.0. |
CVE-2023-47771 | High | 8.3 | 2024-06-19 | Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18. |
CVE-2023-50900 | Medium | 4.3 | 2024-06-19 | Cross-Site Request Forgery (CSRF) vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.10. |
CVE-2023-6495 | Medium | 4.4 | 2024-06-19 | The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and inc… |
CVE-2023-6692 | Medium | 6.4 | 2024-06-19 | The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tab anchor metabox in all vers… |
CVE-2023-47726 | High | 7.1 | 2024-06-18 | IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute c… |
CVE-2023-5527 | High | 7.4 | 2024-06-18 | The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file… |
CVE-2023-37058 | Critical | 9.8 | 2024-06-17 | Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges via a crafted comman… |
CVE-2023-37057 | Critical | 9.8 | 2024-06-17 | An issue in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to execute arbitrary code via the router's authentication mechanism. |
CVE-2023-27636 | Medium | 5.4 | 2024-06-16 | Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor. |
CVE-2023-6696 | High | 8.1 | 2024-06-15 | The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of functionality due… |
CVE-2023-51376 | Medium | 4.3 | 2024-06-14 | Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Client Site: from n/a through 1.0.34. |
CVE-2023-51497 | Medium | 5.4 | 2024-06-14 | Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3… |
CVE-2023-51496 | Medium | 5.3 | 2024-06-14 | Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7. |
CVE-2023-51495 | Medium | 6.5 | 2024-06-14 | Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7. |
CVE-2023-51377 | Medium | 5.3 | 2024-06-14 | Missing Authorization vulnerability in WPEverest Everest Forms.This issue affects Everest Forms: from n/a through 2.0.3. |
CVE-2023-6492 | Medium | 4.3 | 2024-06-14 | The Simple Sitemap – Create a Responsive HTML Sitemap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3… |
CVE-2023-51523 | Medium | 4.3 | 2024-06-14 | Missing Authorization vulnerability in WriterSystem WooCommerce Easy Duplicate Product.This issue affects WooCommerce Easy Duplicate Product: from n/a through… |
CVE-2023-51516 | Medium | 5.4 | 2024-06-14 | Missing Authorization vulnerability in Business Directory Team Business Directory Plugin.This issue affects Business Directory Plugin: from n/a through 6.3.9. |
CVE-2023-51507 | Medium | 5.3 | 2024-06-14 | Missing Authorization vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.16. |
CVE-2023-37394 | Medium | 5.3 | 2024-06-14 | Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue affects WP Dummy Content Generator: from n/a through 2.3.0. |
CVE-2023-36695 | Medium | 5.4 | 2024-06-14 | Missing Authorization vulnerability in Maxime Schoeni Sublanguage.This issue affects Sublanguage: from n/a through 2.9. |
CVE-2023-36694 | Medium | 6.3 | 2024-06-14 | Missing Authorization vulnerability in Bryan Lee Kingkong Board.This issue affects Kingkong Board: from n/a through 2.1.0.2. |
CVE-2023-36504 | Medium | 6.5 | 2024-06-14 | Missing Authorization vulnerability in BBS e-Theme BBS e-Popup.This issue affects BBS e-Popup: from n/a through 2.4.5. |
CVE-2023-35045 | Medium | 4.3 | 2024-06-14 | Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7. |
CVE-2023-35040 | Medium | 5.3 | 2024-06-14 | Missing Authorization vulnerability in SendPress SendPress Newsletters.This issue affects SendPress Newsletters: from n/a through 1.23.11.6. |
CVE-2023-29174 | Medium | 6.5 | 2024-06-14 | Missing Authorization vulnerability in NervyThemes SKU Label Changer For WooCommerce.This issue affects SKU Label Changer For WooCommerce: from n/a through 3.0. |
CVE-2023-35860 | Medium | 5.3 | 2024-06-13 | A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the d… |
CVE-2023-35859 | Medium | 6.1 | 2024-06-13 | A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 allows a remote attacker to inject arbitrary scrip… |
CVE-2023-35858 | Medium | 5.3 | 2024-06-13 | XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remote, unauthenticated attacker to obtain application… |
CVE-2023-52890 | Medium | 4.5 | 2024-06-13 | NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging. |
CVE-2023-49559 | Low | 3.7 | 2024-06-12 | An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives fu… |
CVE-2023-29267 | Medium | 5.3 | 2024-06-12 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5is vulnerable to a denial of service, under specific configurations, as t… |
CVE-2023-51524 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in weForms.This issue affects weForms: from n/a through 1.6.18. |
CVE-2023-51413 | Medium | 5.3 | 2024-06-12 | Missing Authorization vulnerability in Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.29. |
CVE-2023-48280 | High | 7.5 | 2024-06-12 | Missing Authorization vulnerability in Consensu.IO Consensu.Io.This issue affects Consensu.Io: from n/a through 1.0.1. |
CVE-2023-47845 | Medium | 4.3 | 2024-06-12 | Cross-Site Request Forgery (CSRF) vulnerability in Lim Kai Yang Grab & Save.This issue affects Grab & Save: from n/a through 1.0.4. |
CVE-2023-47828 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in Mandrill wpMandrill.This issue affects wpMandrill: from n/a through 1.33. |
CVE-2023-44234 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in Bastianon Massimo WP GPX Map.This issue affects WP GPX Map: from n/a through 1.7.08. |
CVE-2023-41240 | Medium | 5.3 | 2024-06-12 | Missing Authorization vulnerability in Vark Pricing Deals for WooCommerce.This issue affects Pricing Deals for WooCommerce: from n/a through 2.0.3.2. |
CVE-2023-40672 | Medium | 5.4 | 2024-06-12 | Missing Authorization vulnerability in Hardik Chavada Sticky Social Media Icons.This issue affects Sticky Social Media Icons: from n/a through 2.1. |
CVE-2023-40603 | Medium | 5.3 | 2024-06-12 | Missing Authorization vulnerability in Gangesh Matta Simple Org Chart.This issue affects Simple Org Chart: from n/a through 2.3.4. |
CVE-2023-40209 | Medium | 6.5 | 2024-06-12 | Missing Authorization vulnerability in Himalaya Saxena Highcompress Image Compressor.This issue affects Highcompress Image Compressor: from n/a through 6.0.0. |
CVE-2023-38395 | Medium | 5.4 | 2024-06-12 | Missing Authorization vulnerability in Afzal Multani WP Clone Menu.This issue affects WP Clone Menu: from n/a through 1.0.1. |
CVE-2023-25030 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in Buy Me a Coffee.This issue affects Buy Me a Coffee: from n/a through 3.7. |
CVE-2023-52177 | Medium | 5.4 | 2024-06-12 | Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.3. |
CVE-2023-52117 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid: from n/a through 5.6.6. |
CVE-2023-51680 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in TechnoVama Quotes for WooCommerce.This issue affects Quotes for WooCommerce: from n/a through 2.0.1. |
CVE-2023-51679 | Medium | 5.4 | 2024-06-12 | Missing Authorization vulnerability in BulkGate BulkGate SMS Plugin for WooCommerce.This issue affects BulkGate SMS Plugin for WooCommerce: from n/a through 3… |
CVE-2023-51671 | Medium | 5.4 | 2024-06-12 | Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3. |
CVE-2023-51670 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3. |
CVE-2023-51537 | Medium | 5.3 | 2024-06-12 | Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.5. |
CVE-2023-51526 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4. |
CVE-2023-4727 | High | 7.5 | 2024-06-11 | A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessi… |
CVE-2023-52227 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: from n/a throug… |
CVE-2023-52224 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Revolut Revolut Gateway for WooCommerce.This issue affects Revolut Gateway for WooCommerce: from n/a through 4.9.7. |
CVE-2023-48273 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Preloader for Website.This issue affects Preloader for Website: from n/a through 1.2… |
CVE-2023-52233 | High | 8.6 | 2024-06-11 | Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6. |
CVE-2023-51682 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in ibericode MC4WP.This issue affects MC4WP: from n/a through 4.9.9. |
CVE-2023-51519 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2. |