Skip to content
OpenAdvisories

Archive

October 2023

Vulnerabilities first published in this month (UTC), newest first.

← September 2023 2023 / October November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

2,713 results · Feed

  • Medium 4.8
    CVE-2023-5243

    Login screen manager <= 3.5.2 - Admin+ Stored XSS

    The Login Screen Manager WordPress plugin through 3.5.2 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallow…

    Web / CMS
  • Medium 6.1
    CVE-2023-5238

    EventPrime < 3.2.0 - Reflected HTML Injection on keyword parameter

    The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website.

    Web / CMS
  • Medium 5.4
    CVE-2023-4823

    WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS

    The WP Meta and Date Remover WordPress plugin before 2.2.0 provides an AJAX endpoint for configuring the plugin settings. This endpoint has no capability checks and does not sanitize the user input, which is then later output unescaped. Allowing any authentic…

    Web / CMS
  • Unscored —
    CVE-2023-5458

    CITS Support svg, webp Media and TTF,OTF File Upload < 3.0 - Author+ Stored XSS via SVG

    The CITS Support svg, webp Media and TTF,OTF File Upload WordPress plugin before 3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

    Web / CMS
  • Unscored —
    CVE-2023-5360 Public exploit Scanner template EPSS 86%

    Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

    The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.

    Web / CMS
  • Medium 4.8
    CVE-2023-5229

    E2Pdf < 1.20.20 - Admin+ Stored Cross-Site Scriping

    The E2Pdf WordPress plugin before 1.20.20 does not sanitize and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

    Web / CMS
  • High 8.2
    CVE-2023-24000 Scanner template

    WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GamiPress gamipress allows SQL Injection.This issue affects GamiPress: from n/a through 2.5.7.

    GamiPress GamiPress
  • Medium 5.5
    CVE-2023-25047

    WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3.

    David F. Carr RSVPMaker
  • Medium 6.7
    CVE-2023-25045

    WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3.

    David F. Carr RSVPMaker
  • Medium 6.4
    CVE-2023-5116

    Live updates from Excel <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Live updates from Excel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ipushpull_page' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attri…

    ipushpull Live updates from Excel Web / CMS
  • Unscored —
    CVE-2016-1203

    Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.…

    NetMove SaAT Netizen SaAT Netizen installer
  • High 8.8
    CVE-2023-5099

    HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode

    The HTML filter and csv-file search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.7 via the 'src' attribute of the 'csvsearch' shortcode. This allows authenticated attackers, with contributor-level permissions …

    Jonas Hjalmarsson HTML filter and csv-file search Web / CMS
  • Medium 5.4
    CVE-2023-5114

    idbbee <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The idbbee plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idbbee' shortcode in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possib…

    faikdjikic idbbee Web / CMS
  • Medium 6.4
    CVE-2023-5073

    iframe forms <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframe Shortcode

    The iframe forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'iframe' shortcode in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…

    jrbecart iframe forms Web / CMS
  • High 8.1
    CVE-2022-3007

    Unauthorized Access Vulnerability in Syska SW100 Smartwatch

    The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update (DFU) which is used for performing Over-The-Air (OTA) firmware updates on the Bluetooth Low Energy (BLE) devices. An una…

    Syska Led Lights Pvt Syska SW100 Smartwatch
  • Medium 5.9
    CVE-2023-40681

    WordPress Groundhogg Plugin <= 2.7.11.10 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Groundhogg Inc. Groundhogg plugin <= 2.7.11.10 versions.

    Groundhogg Groundhogg
  • High 7.1
    CVE-2023-46622

    WordPress WPPizza Plugin <= 3.18.2 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ollybach WPPizza – A Restaurant Plugin plugin <= 3.18.2 versions.

    ollybach WPPizza – A Restaurant Plugin
  • High 7.1
    CVE-2023-46313

    WordPress Zotpress Plugin <= 7.3.4 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin <= 7.3.4 versions.

    Katie Seaborn Zotpress
  • Unscored —
    CVE-2015-2968

    LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since…

    LINE LINE for iOS LINE@ for Android Android iOS
  • Unscored —
    CVE-2015-0897

    LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-th…

    LINE LINE for iOS LINE@ for Android Android iOS
  • High 7.1
    CVE-2023-46312

    WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Zaytech Smart Online Order for Clover plugin <= 1.5.4 versions.

    ZAYTECH Smart Online Order for Clover
  • High 8.8
    CVE-2023-5436

    Vertical marquee plugin <= 7.1 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Vertical marquee plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…

    gopiplushotmailcom Vertical marquee plugin Web / CMS
  • High 8.8
    CVE-2023-5433

    Message ticker <= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Message ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. T…

    Gopiplus Message ticker Web / CMS
  • High 8.8
    CVE-2023-5438

    wp image slideshow <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The wp image slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL que…

    Gopiplus wp image slideshow Web / CMS
  • High 8.8
    CVE-2023-5437

    WP fade in text news <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The WP fade in text news plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL q…

    Gopiplus WP fade in text news Web / CMS
  • High 8.8
    CVE-2023-5429

    Information Reel <= 10.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Information Reel plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query…

    Gopiplus Information Reel Web / CMS
  • High 8.8
    CVE-2023-5431

    Left right image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Left right image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the …

    Gopiplus Left right image slideshow gallery Web / CMS
  • High 8.8
    CVE-2023-5430

    Jquery news ticker <= 3.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer…

    gopiplushotmailcom Jquery news ticker Web / CMS
  • High 8.8
    CVE-2023-5439

    Wp photo text slider 50 <= 8.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Wp photo text slider 50 plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL…

    Gopiplus Wp photo text slider 50 Web / CMS
  • High 8.8
    CVE-2023-5435

    Up down image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Up down image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exi…

    Gopiplus Up down image slideshow gallery Web / CMS
  • High 8.8
    CVE-2023-5434

    Superb slideshow gallery <= 13.1 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Superb slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S…

    Gopiplus Superb slideshow gallery Web / CMS
  • High 8.8
    CVE-2023-5464

    Jquery accordion slideshow <= 8.1 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Jquery accordion slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing …

    Gopiplus Jquery accordion slideshow Web / CMS
  • High 8.8
    CVE-2023-5412 Public exploit

    Image horizontal reel scroll slideshow <= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on …

    Gopiplus Image horizontal reel scroll slideshow Web / CMS
  • High 8.8
    CVE-2023-5428

    Image vertical reel scroll slideshow <= 9.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…

    Gopiplus Image vertical reel scroll slideshow Web / CMS
  • Medium 4.0
    CVE-2023-5873

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 11.1.0.

    pimcore pimcore/pimcore pimcore/pimcore Packagist
  • Medium 5.9
    CVE-2023-46210

    WordPress WC Captcha Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebCource WC Captcha plugin <= 1.4 versions.

    WebCource WC Captcha
  • Medium 6.3
    CVE-2023-5866

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • Medium 4.6
    CVE-2023-5867

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 7.6
    CVE-2023-5865

    Insufficient Session Expiration in thorsten/phpmyfaq

    Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 7.4
    CVE-2023-5863 Scanner template

    Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist