Skip to content
OpenAdvisories

Archive

23 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /23 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.4
    CVE-2020-36769

    Widget Settings Importer/Exporter Plugin <= 1.5.3 - Unauthorized Widget Import to Stored Cross-Site Scripting

    The Widget Settings Importer/Exporter Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wp_ajax_import_widget_dataparameter AJAX action in versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping.…

    Kevin Langley Jr. Widget Settings Importer/Exporter
  • High 8.8
    CVE-2023-5961 Public exploit

    ioLogik E1200 Series: Cross-Site Request Forgery (CSRF) Vulnerability

    A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. An attacker can exploit this vulnerability to trick a client into making an unintentional request to the web server, which will be …

    Moxa ioLogik E1200 Series ICS / OT
  • High 7.2
    CVE-2023-7002 EPSS 31%

    Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url

    The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter. This vulnerability allows authenticated attackers, with administrator-level permissions and above, to execute …

    Inisev BackupBliss – Backup & Migration with Free Cloud Storage Web / CMS
  • High 8.1
    CVE-2023-6971

    The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'co…

    Migrate Backup Migration Web / CMS