Archive

24 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /24 November 2023 →

All Critical High Medium Low Exploited only Public exploit

122 results · Feed

Medium 6.5

CVE-2023-46069

WordPress Ajax Archive Calendar Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Osmansorkar Ajax Archive Calendar plugin <= 2.6.7 versions.

Osmansorkar Ajax Archive Calendar

Oct 24, 2023
Medium 5.9

CVE-2023-46068

WordPress Maileon Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XQueue GmbH Maileon for WordPress plugin <= 2.16.0 versions.

XQueue Maileon for WordPress Web / CMS

Oct 24, 2023
High 7.1

CVE-2023-45837

WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in XYDAC Ultimate Taxonomy Manager plugin <= 2.0 versions.

XYDAC Ultimate Taxonomy Manager

Oct 24, 2023
Unscored —

CVE-2023-5732

Address bar spoofing via bidirectional characters

An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerability affects Firefox < 117, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 24, 2023
Unscored —

CVE-2023-5731

Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that …

Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Alpine

Oct 24, 2023
Unscored —

CVE-2023-5729

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscu…

Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Alpine

Oct 24, 2023
Unscored —

CVE-2023-5730

Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 24, 2023
High 7.5

CVE-2023-5728

During garbage collection extra operations were performed on a object that should not be. This could have led to a pote…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 24, 2023
Unscored —

CVE-2023-5727

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which …

Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu Alpine

Oct 24, 2023
Unscored —

CVE-2023-5726

A website could have obscured the full screen notification by using the file open dialog. This could have led to user c…

Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu Alpine

Oct 24, 2023
Unscored —

CVE-2023-5725

A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 24, 2023
High 7.5

CVE-2023-5724

Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 24, 2023
Unscored —

CVE-2023-5722

Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a ser…

Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Alpine

Oct 24, 2023
Unscored —

CVE-2023-5723

An attacker with temporary script access to a site could have set a cookie containing invalid characters using `documen…

Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Alpine

Oct 24, 2023
Unscored —

CVE-2023-5721

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Oct 24, 2023
High 7.1

CVE-2023-45835

WordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Libsyn Libsyn Publisher Hub plugin <= 1.4.4 versions.

libsyn Libsyn Publisher Hub

Oct 24, 2023
Medium 5.9

CVE-2023-45833

WordPress LeadSquared Suite Plugin <= 0.7.4 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in LeadSquared Suite plugin <= 0.7.4 versions.

LeadSquared LeadSquared Suite

Oct 24, 2023
Medium 6.5

CVE-2023-45829

WordPress Newsletter & Bulk Email Sender Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in HappyBox Newsletter & Bulk Email Sender – Email Newsletter Plugin for WordPress plugin <= 2.0.1 versions.

HappyBox Newsletter & Bulk Email Sender – Email Newsletter Plugin for WordPress Web / CMS

Oct 24, 2023
High 7.1

CVE-2023-45772

WordPress Proofreading Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Scribit Proofreading plugin <= 1.0.11 versions.

Scribit Proofreading

Oct 24, 2023
High 7.1

CVE-2023-45770

WordPress Fast WP Speed Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fastwpspeed Fast WP Speed plugin <= 1.0.0 versions.

Fastwpspeed Fast WP Speed

Oct 24, 2023
Medium 5.9

CVE-2023-45832

WordPress WP GoToWebinar Plugin <= 14.45 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Gibson WP GoToWebinar plugin <= 14.45 versions.

Martin Gibson WP GoToWebinar

Oct 24, 2023
High 7.1

CVE-2023-45769

WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alex Raven WP Report Post plugin <= 2.1.2 versions.

Alex Raven WP Report Post

Oct 24, 2023
Medium 5.9

CVE-2023-45768

WordPress Next Page Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Stephanie Leary Next Page plugin <= 1.5.2 versions.

Stephanie Leary Next Page

Oct 24, 2023
Medium 5.9

CVE-2023-45767

WordPress Simple Tweet Plugin <= 1.4.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wokamoto Simple Tweet plugin <= 1.4.0.2 versions.

wokamoto Simple Tweet

Oct 24, 2023
Medium 5.9

CVE-2023-45764

WordPress Scroll post excerpt Plugin <= 8.0 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Scroll post excerpt plugin <= 8.0 versions.

Gopi Ramasamy Scroll post excerpt

Oct 24, 2023
High 7.1

CVE-2023-45761

WordPress Sendle Shipping Plugin <= 5.13 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Joovii Sendle Shipping Plugin plugin <= 5.13 versions.

Joovii Sendle Shipping Plugin

Oct 24, 2023
Medium 5.9

CVE-2023-39924

WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mitchell Bennis Simple File List plugin <= 6.1.9 versions.

Mitchell Bennis Simple File List

Oct 24, 2023
High 7.1

CVE-2023-45759

WordPress Peter’s Custom Anti-Spam Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Peter Keung Peter’s Custom Anti-Spam plugin <= 3.2.2 versions.

Peter Keung Peter’s Custom Anti-Spam

Oct 24, 2023
Medium 5.9

CVE-2023-45758

WordPress Amministrazione Trasparente Plugin <= 8.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi Amministrazione Trasparente plugin <= 8.0.2 versions.

Marco Milesi Amministrazione Trasparente

Oct 24, 2023
High 7.1

CVE-2023-45756

WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spider Teams ApplyOnline – Application Form Builder and Manager plugin <= 2.5.2 versions.

Spider Teams ApplyOnline – Application Form Builder and Manager

Oct 24, 2023
Medium 5.9

CVE-2023-25032

WordPress Print, PDF, Email by PrintFriendly Plugin <= 5.5.1 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Print, PDF, Email by PrintFriendly plugin <= 5.5.1 versions.

Print, PDF, & Email by PrintFriendly Print, PDF, Email by PrintFriendly

Oct 24, 2023
Medium 5.9

CVE-2023-45755

WordPress BuddyPress Global Search Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BuddyBoss BuddyPress Global Search plugin <= 1.2.1 versions.

BuddyBoss BuddyPress Global Search

Oct 24, 2023
Medium 5.9

CVE-2023-45754

WordPress Easy Testimonial Slider and Form Plugin <= 1.0.18 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form allows Stored XSS.This issue affects Easy Testimonial Slider and Form: from n/a through 1.0.18.

I Thirteen Web Solution Easy Testimonial Slider and Form

Oct 24, 2023
High 7.1

CVE-2023-45750

WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in POSIMYTH Nexter Extension plugin <= 2.0.3 versions.

POSIMYTH Nexter Extension

Oct 24, 2023
Medium 5.9

CVE-2023-45747

WordPress WP Lightbox 2 Plugin <= 3.0.6.5 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Syed Balkhi WP Lightbox 2 plugin <= 3.0.6.5 versions.

Syed Balkhi WP Lightbox 2

Oct 24, 2023
Medium 6.5

CVE-2023-45646

WordPress PDF Block Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Henryholtgeerts PDF Block plugin <= 1.1.0 versions.

Henryholtgeerts PDF Block

Oct 24, 2023
Medium 5.9

CVE-2023-45644

WordPress CPT Shortcode Generator Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Anurag Deshmukh CPT Shortcode Generator plugin <= 1.0 versions.

Anurag Deshmukh CPT Shortcode Generator

Oct 24, 2023
Medium 6.5

CVE-2023-45640

WordPress WP ULike Plugin <= 4.6.8 is vulnerable to Cross Site Scripting (XSS)

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TechnoWich WP ULike – Most Advanced WordPress Marketing Toolkit plugin <= 4.6.8 versions.

TechnoWich WP ULike – Most Advanced WordPress Marketing Toolkit Web / CMS

Oct 24, 2023
High 7.1

CVE-2023-45637

WordPress EventPrime Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime EventPrime – Events Calendar, Bookings and Tickets plugin <= 3.1.5 versions.

EventPrime EventPrime – Events Calendar, Bookings and Tickets

Oct 24, 2023
Medium 5.8

CVE-2023-45634

WordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Biztechc Copy or Move Comments plugin <= 5.0.4 versions.

biztechc Copy or Move Comments

Oct 24, 2023