Skip to content
OpenAdvisories

Archive

30 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /30 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

47 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-32793

    WordPress WooCommerce Pre-Orders Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Pre-Orders plugin <= 2.0.0 versions.

    woocommerce WooCommerce Pre-Orders Web / CMS
  • Medium 4.3
    CVE-2023-4600

    The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on t…

    AffiliateWP AffiliateWP
  • Medium 5.8
    CVE-2023-32740

    WordPress Custom 404 Pro Plugin <= 3.8.1 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kunal Nagar Custom 404 Pro plugin <= 3.8.1 versions.

    Kunal Nagar Custom 404 Pro
  • Medium 4.3
    CVE-2023-4522

    Improper Validation of Specified Type of Input in GitLab

    An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit.

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 6.4
    CVE-2023-4599

    Email Encoder <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it po…

    Online Optimisation Email Encoder – Protect Email Addresses and Phone Numbers Web / CMS
  • Medium 6.4
    CVE-2023-4597

    Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slimstat' shortcode in versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

    VeronaLabs Slimstat Analytics Web / CMS
  • Medium 5.4
    CVE-2023-38970

    Badaso vulnerable to cross-site scripting

    Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Name of member parameter in the add new member function.

    uasoft-indonesia/badaso Packagist