2023 CVEs (page 30)
Page 30 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-52199 | Medium | 6.5 | 2024-06-11 | Missing Authorization vulnerability in Matthias Pfefferle & Automattic ActivityPub.This issue affects ActivityPub: from n/a through 1.0.5. |
CVE-2023-51498 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Woo WooCommerce Canada Post Shipping.This issue affects WooCommerce Canada Post Shipping: from n/a through 2.8.3. |
CVE-2023-46720 | Medium | 6.7 | 2024-06-11 | A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2… |
CVE-2023-23775 | Medium | 6.5 | 2024-06-11 | Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may al… |
CVE-2023-52183 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.3. |
CVE-2023-50763 | Medium | 4.9 | 2024-06-11 | A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versio… |
CVE-2023-38533 | Low | 3.3 | 2024-06-11 | A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates temporary download files in a directory with i… |
CVE-2023-52179 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in WebCodingPlace Product Expiry for WooCommerce.This issue affects Product Expiry for WooCommerce: from n/a through 2.5. |
CVE-2023-52217 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11. |
CVE-2023-52186 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.2. |
CVE-2023-33922 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.13.2. |
CVE-2023-28775 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Yoast Yoast SEO Premium.This issue affects Yoast SEO Premium: from n/a through 20.4. |
CVE-2023-25799 | High | 8.3 | 2024-06-11 | Missing Authorization vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.1.8. |
CVE-2023-7264 | High | 8.1 | 2024-06-11 | The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, and including, 1.0.22… |
CVE-2023-6748 | Medium | 4.3 | 2024-06-11 | The Custom Field Template plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the 'cft' shortc… |
CVE-2023-6745 | Medium | 6.4 | 2024-06-11 | The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cpt' shortcode in all versions up to, and includi… |
CVE-2023-40389 | Medium | 5.5 | 2024-06-10 | The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be a… |
CVE-2023-45188 | Medium | 6.5 | 2024-06-09 | IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of… |
CVE-2023-34003 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in Woo WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.1.51. |
CVE-2023-31080 | High | 8.3 | 2024-06-09 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Eleme… |
CVE-2023-23640 | Medium | 5.4 | 2024-06-09 | Missing Authorization vulnerability in MainWP MainWP UpdraftPlus Extension.This issue affects MainWP UpdraftPlus Extension: from n/a through 4.0.6. |
CVE-2023-23639 | Medium | 5.4 | 2024-06-09 | Missing Authorization vulnerability in MainWP MainWP Staging Extension.This issue affects MainWP Staging Extension: from n/a through 4.0.3. |
CVE-2023-52232 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2. |
CVE-2023-52230 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.3. |
CVE-2023-51494 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.1. |
CVE-2023-45707 | Medium | 4.4 | 2024-06-08 | HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to crede… |
CVE-2023-7261 | High | 7.8 | 2024-06-07 | Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious fi… |
CVE-2023-49224 | High | 8.0 | 2024-06-07 | Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorized_keys file. A remote attacker could use this key to gain root p… |
CVE-2023-49223 | High | 8.8 | 2024-06-07 | Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd… |
CVE-2023-49222 | High | 8.8 | 2024-06-07 | Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key. A remote attacker could exploit this to gain root privilege… |
CVE-2023-49221 | High | 7.8 | 2024-06-07 | Precor touchscreen console P62, P80, and P82 could allow a remote attacker (within the local network) to bypass security restrictions, and access the service m… |
CVE-2023-5424 | Medium | 4.7 | 2024-06-07 | The WS Form LITE plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.9.217. This allows unauthenticated attackers to embed… |
CVE-2023-6491 | Medium | 4.3 | 2024-06-07 | The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the wpmtst_save_view_sti… |
CVE-2023-32475 | High | 7.6 | 2024-06-07 | Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechan… |
CVE-2023-6876 | Medium | 5.4 | 2024-06-07 | The Clever Fox – One Click Website Importer by Nayra Themes plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability… |
CVE-2023-37539 | High | 8.4 | 2024-06-06 | The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ability to edit documents in the catalog… |
CVE-2023-51847 | High | 7.5 | 2024-06-06 | An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoap_context_t function in the src/coap_threadsafe.c:297:3… |
CVE-2023-49441 | High | 7.5 | 2024-06-06 | dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query. |
CVE-2023-45192 | High | 8.2 | 2024-06-06 | IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A r… |
CVE-2023-6968 | High | 8.1 | 2024-06-06 | The The Moneytizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 9.6.3. This is due to missing or inco… |
CVE-2023-6966 | High | 8.1 | 2024-06-06 | The The Moneytizer plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check… |
CVE-2023-6956 | Medium | 6.1 | 2024-06-06 | The EasyAzon – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘easyazon-cloaking-locale’ param… |
CVE-2023-50804 | Low | 3.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor, and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2… |
CVE-2023-50803 | Low | 3.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor, and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2… |
CVE-2023-49928 | High | 7.5 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, E… |
CVE-2023-49927 | Medium | 5.3 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, E… |
CVE-2023-52176 | Medium | 5.3 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in miniorange Malware Scanner allows Accessing Functionality Not Properly Constrained by ACLs.This issue affect… |
CVE-2023-52147 | Low | 3.7 | 2024-06-04 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in All In One WP Security & Firewall Team All In One WP Security & Firewall allows Acc… |
CVE-2023-51667 | Medium | 5.3 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in FeedbackWP Rate my Post – WP Rating System allows Accessing Functionality Not Properly Constrained by ACLs.T… |
CVE-2023-51544 | Medium | 5.3 | 2024-06-04 | Improper Control of Interaction Frequency vulnerability in Metagauss RegistrationMagic allows Functionality Misuse.This issue affects RegistrationMagic: from n… |
CVE-2023-51543 | Medium | 5.3 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in Metagauss RegistrationMagic allows Accessing Functionality Not Properly Constrained by ACLs.This issue affec… |
CVE-2023-51542 | Medium | 5.3 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in WPMU DEV Branda allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Branda: f… |
CVE-2023-51511 | Medium | 6.5 | 2024-06-04 | Improper Authentication vulnerability in Pluggabl LLC Booster Elite for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue… |
CVE-2023-49852 | Medium | 6.5 | 2024-06-04 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Vsourz Digital Responsive Slick Slider WordPress allows Code Inj… |
CVE-2023-49822 | Low | 3.7 | 2024-06-04 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Const… |
CVE-2023-49774 | Medium | 5.3 | 2024-06-04 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Accessing Functionality No… |
CVE-2023-49748 | Low | 3.7 | 2024-06-04 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPServeur, NicolasKulka, wpformation WPS Hide Login allows Accessing Functionality… |
CVE-2023-49741 | Low | 3.7 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in wpdevart Coming soon and Maintenance mode allows Accessing Functionality Not Properly Constrained by ACLs.Th… |
CVE-2023-48753 | Medium | 5.3 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in 10up Restricted Site Access allows Accessing Functionality Not Properly Constrained by ACLs.This issue affec… |
CVE-2023-48747 | Medium | 6.5 | 2024-06-04 | Improper Authentication vulnerability in Pluggabl LLC Booster for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affect… |
CVE-2023-48745 | Medium | 5.3 | 2024-06-04 | Improper Restriction of Excessive Authentication Attempts vulnerability in WebFactory Ltd Captcha Code allows Functionality Bypass.This issue affects Captcha C… |
CVE-2023-48335 | Low | 3.7 | 2024-06-04 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Webcraftic Hide login page allows Accessing Functionality Not Properly Constrained… |
CVE-2023-48318 | Medium | 5.3 | 2024-06-04 | Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Contact Form Email allows Functionality Bypass.This issue affects Contact… |
CVE-2023-48290 | Medium | 5.3 | 2024-06-04 | Improper Restriction of Excessive Authentication Attempts vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Functionality Bypass.This issue a… |
CVE-2023-48285 | Medium | 5.3 | 2024-06-04 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Tips and Tricks HQ Stripe Payments allows Code Injection.This is… |
CVE-2023-48276 | Medium | 5.3 | 2024-06-04 | Improper Restriction of Excessive Authentication Attempts vulnerability in Nitin Rathod WP Forms Puzzle Captcha allows Functionality Bypass.This issue affects… |
CVE-2023-48271 | Medium | 5.3 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in yonifre Maspik – Spam blacklist allows Accessing Functionality Not Properly Constrained by ACLs.This issue a… |
CVE-2023-47837 | High | 8.3 | 2024-06-04 | Improper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from n/a through 4.0.10. |
CVE-2023-47818 | Low | 3.7 | 2024-06-04 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in LWS LWS Hide Login allows Accessing Functionality Not Properly Constrained by ACLs… |
CVE-2023-47769 | Low | 3.7 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in WP Maintenance allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Mainten… |
CVE-2023-47513 | Medium | 5.4 | 2024-06-04 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ARI Soft ARI Stream Quiz allows Code Injection.This issue affect… |
CVE-2023-47189 | Medium | 5.3 | 2024-06-04 | Improper Authentication vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender… |
CVE-2023-46630 | High | 7.5 | 2024-06-04 | Improper Authentication vulnerability in wpase Admin and Site Enhancements (ASE) allows Accessing Functionality Not Properly Constrained by ACLs.This issue aff… |
CVE-2023-46310 | Medium | 5.3 | 2024-06-04 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpDiscuz allows Code Injection.This issue affects… |
CVE-2023-45635 | Medium | 5.4 | 2024-06-04 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WP Darko Responsive Tabs allows Code Injection.This issue affect… |
CVE-2023-45053 | Medium | 4.3 | 2024-06-04 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in pluginever WP Content Pilot – Autoblogging & Affiliate Marketing… |
CVE-2023-5751 | High | 7.8 | 2024-06-04 | A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of r… |
CVE-2023-45009 | Medium | 5.3 | 2024-06-04 | Improper Restriction of Excessive Authentication Attempts vulnerability in Forge12 Interactive GmbH Captcha/Honeypot for Contact Form 7 allows Functionality By… |
CVE-2023-44235 | Medium | 5.3 | 2024-06-04 | Improper Restriction of Excessive Authentication Attempts vulnerability in Devnath verma WP Captcha allows Functionality Bypass.This issue affects WP Captcha… |
CVE-2023-41134 | Medium | 5.3 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in pluginkollektiv Antispam Bee allows Accessing Functionality Not Properly Constrained by ACLs.This issue affe… |
CVE-2023-40673 | Medium | 6.5 | 2024-06-04 | : Improper Control of Interaction Frequency vulnerability in cartpauj Cartpauj Register Captcha allows Functionality Misuse.This issue affects Cartpauj Registe… |
CVE-2023-40557 | Medium | 5.4 | 2024-06-04 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in PickPlugins Tabs & Accordion allows Code Injection.This issue af… |
CVE-2023-40332 | Medium | 5.3 | 2024-06-04 | Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: f… |
CVE-2023-39161 | Medium | 5.4 | 2024-06-04 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WP Discussion Board Discussion Board allows Content Spoofing, Cr… |
CVE-2023-38520 | Medium | 6.5 | 2024-06-04 | External Control of Assumed-Immutable Web Parameter vulnerability in PINPOINT.WORLD Pinpoint Booking System allows Functionality Misuse.This issue affects Pinp… |
CVE-2023-37865 | Medium | 5.3 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by… |
CVE-2023-34001 | Medium | 5.3 | 2024-06-04 | Improper Restriction of Excessive Authentication Attempts vulnerability in WPPlugins – WordPress Security Plugins Hide My WP Ghost allows Functionality Bypass… |
CVE-2023-33930 | Critical | 9.1 | 2024-06-04 | Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows C… |
CVE-2023-28494 | Medium | 4.3 | 2024-06-04 | Missing Authorization vulnerability in CodePeople Contact Form Email allows Functionality Misuse.This issue affects Contact Form Email: from n/a through 1.3.31. |
CVE-2023-28492 | Medium | 4.3 | 2024-06-03 | Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue affects CP Multi View Event Calendar: fro… |
CVE-2023-27460 | Medium | 4.3 | 2024-06-03 | Missing Authorization vulnerability in CodePeople, paypaldev CP Contact Form with Paypal allows Functionality Misuse.This issue affects CP Contact Form with Pa… |
CVE-2023-27437 | Low | 3.7 | 2024-06-03 | Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf allows Functionality Misuse.This issue affects Event Espresso 4 Decaf: from n/a th… |
CVE-2023-26523 | Medium | 4.3 | 2024-06-03 | Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue affects Calculated Fields Form: from n/a throug… |
CVE-2023-26521 | Medium | 4.3 | 2024-06-03 | Missing Authorization vulnerability in CodePeople Search in Place allows Functionality Misuse.This issue affects Search in Place: from n/a through 1.0.104. |
CVE-2023-24373 | Low | 3.7 | 2024-06-03 | External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Manipulating Hidden Fields.Th… |
CVE-2023-23738 | Medium | 5.3 | 2024-06-03 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Brainstorm Force Spectra allows Content Spo… |
CVE-2023-23735 | Medium | 5.3 | 2024-06-03 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force Spectra allows Code Injection.This issue affect… |
CVE-2023-23730 | Medium | 5.3 | 2024-06-03 | Improper Restriction of Excessive Authentication Attempts vulnerability in Brainstorm Force Spectra allows Functionality Bypass.This issue affects Spectra: fro… |
CVE-2023-52162 | Medium | 6.7 | 2024-06-03 | Mercusys MW325R EU V3 (Firmware MW325R(EU)_V3_1.11.0 Build 221019) is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute arb… |
CVE-2023-51219 | Critical | 9.6 | 2024-06-03 | A deep link validation issue in KakaoTalk 10.4.3 allowed a remote adversary to direct users to run any attacker-controlled JavaScript within a WebView. The imp… |