Skip to content
OpenAdvisories

Archive

24 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /24 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

54 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-46204

    WordPress Duplicate Theme Plugin <= 0.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Muller Digital Inc. Duplicate Theme plugin <= 0.1.6 versions.

    Muller Digital Duplicate Theme
  • Medium 4.3
    CVE-2023-46202

    WordPress Auto Login New User After Registration Plugin <= 1.9.6 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Jeff Sherk Auto Login New User After Registration plugin <= 1.9.6 versions.

    Jeff Sherk Auto Login New User After Registration
  • Medium 5.4
    CVE-2023-46198

    WordPress Appointment Calendar Plugin <= 2.9.6 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Scientech It Solution Appointment Calendar plugin <= 2.9.6 versions.

    Scientech It Solution Appointment Calendar
  • Medium 4.3
    CVE-2023-46193

    WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Internet Marketing Ninjas Internal Link Building plugin <= 1.2.3 versions.

    Internet Marketing Ninjas Internal Link Building
  • Medium 4.3
    CVE-2023-46191

    WordPress Open Graph Metabox Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Niels van Renselaar Open Graph Metabox plugin <= 1.4.4 versions.

    Niels van Renselaar Open Graph Metabox
  • Medium 4.3
    CVE-2023-46190

    WordPress Novo-Map : your WP posts on custom google maps Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Novo-media Novo-Map : your WP posts on custom google maps plugin <= 1.1.2 versions.

    Novo-media Novo-Map : your WP posts on custom google maps
  • Medium 4.3
    CVE-2023-46189

    WordPress Google Calendar Events Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Simple Calendar – Google Calendar Plugin <= 3.2.5 versions.

    Simple Calendar Simple Calendar – Google Calendar Plugin
  • Medium 4.3
    CVE-2023-46152

    WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.7.1 versions.

    RealMag777 WOLF – WordPress Posts Bulk Editor and Manager Professional Web / CMS
  • Medium 4.3
    CVE-2023-46151

    WordPress Product Category Tree Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in AWESOME TOGI Product Category Tree plugin <= 2.5 versions.

    AWESOME TOGI Product Category Tree
  • Medium 5.4
    CVE-2023-46150

    WordPress WP Radio plugin <= 3.1.9 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in WP Military WP Radio plugin <= 3.1.9 versions.

    WP Military WP Radio
  • Medium 5.9
    CVE-2023-31580

    light-oauth2 missing public key verification

    light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token.

    com.networknt:light-oauth2 Maven
  • Medium 5.5
    CVE-2023-46316

    In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

    traceroute traceroute traceroute traceroute Debian Ubuntu Azure Linux Alpine
  • Medium 5.4
    CVE-2023-44769 Public exploit

    Zenario CMS Cross-site Scripting vulnerability

    A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias.

    tribalsystems/zenario Packagist
  • Medium 6.5
    CVE-2022-38485

    A directory traversal vulnerability exists in the AgeVolt Portal prior to version 0.1 that leads to Information Disclos…