CVEs published April 23, 2023
26 CVEs were published on April 23, 2023: 1 critical, 3 high.
- Published
- 26
- Critical
- 1
- High
- 3
- Medium
- 22
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- 1app Technologies 1app Business Forms
- 1
- Apptivo Business Site CRM
- 1
- BlueGlass Jobs for WordPress
- 1
- Boris Kuzmanov 0mk Shortener
- 1
- Codebangers All in One Time Clock Lite
- 1
- Davinder Singh Custom Settings
- 1
- George Gecewicz Portfolio Slideshow
- 1
- Google Maps v3 Shortcode
- 1
- Ian Haycox Motor Racing League
- 1
- James Irving-Swift Electric Studio Client Login
- 1
Critical 1
High 3
- CVE-2023-24404WordPress Marketing Performance Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)VryaSage Marketing Performance
- CVE-2023-22718WordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Scripting (XSS)Jason Lau User Meta Manager
- CVE-2023-31043EnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in situations where optional parameters are used wi
Medium, low and unrated 22
- CVE-2023-2246SourceCodester Online Pizza Ordering System unrestricted uploadSourceCodester Online Pizza Ordering System
- CVE-2023-22686WordPress Nice PayPal Button Lite Plugin <= 1.3.5 is vulnerable to Cross Site Request Forgery (CSRF)TriniTronic Nice PayPal Button Lite
- CVE-2023-23879WordPress PHP Execution Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)Nicolas Zeh PHP Execution
- CVE-2022-45080WordPress Add Multiple Marker Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)KrishaWeb Add Multiple Marker
- CVE-2022-45074WordPress Activity Reactions For Buddypress Plugin <= 1.0.22 is vulnerable to Cross Site Request Forgery (CSRF)Paramveer Singh for Arete IT Private Limited Activity React…
- CVE-2023-27614WordPress Motor Racing League Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)Ian Haycox Motor Racing League
- CVE-2023-27425WordPress Electric Studio Client Login Plugin <= 0.8.1 is vulnerable to Cross Site Scripting (XSS)James Irving-Swift Electric Studio Client Login
- CVE-2023-25451WordPress CPO Content Types Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)WPChill CPO Content Types
- CVE-2023-23806WordPress WordPress Custom Settings Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)Davinder Singh Custom Settings
- CVE-2023-23816WordPress Sitemap Index Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)Twardes Sitemap Index
- CVE-2023-23817WordPress Simple PDF Viewer Plugin <= 1.9 is vulnerable to Cross Site Scripting (XSS)WebArea | Vera Nedvyzhenko Simple PDF Viewer
- CVE-2023-23827WordPress Google Maps v3 Shortcode Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)Google Maps v3 Shortcode
- CVE-2023-23717WordPress Portfolio Slideshow Plugin <= 1.13.0 is vulnerable to Cross Site Scripting (XSS)George Gecewicz Portfolio Slideshow
- CVE-2023-23832WordPress Ultimate WP Query Search Filter Plugin <= 1.0.10 is vulnerable to Cross Site Scripting (XSS)TC Ultimate WP Query Search Filter
- CVE-2022-44743WordPress Jobs for WordPress Plugin <= 2.5.11.2 is vulnerable to Cross Site Scripting (XSS)BlueGlass Jobs for WordPress
- CVE-2022-45361WordPress 0mk Shortener Plugin <= 0.2 is vulnerable to Cross Site Scripting (XSS)Boris Kuzmanov 0mk Shortener
- CVE-2023-24386WordPress AI Contact Us Form Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)Karishma Arora AI Contact Us Form
- CVE-2023-22698WordPress Theme Blvd Responsive Google Maps Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)Jason Bobich Theme Blvd Responsive Google Maps
- CVE-2022-47435WordPress WP-OliveCart Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)Olive Design WP-OliveCart
- CVE-2022-44594WordPress All in One Time Clock Lite Plugin <= 1.3.320 is vulnerable to Cross Site Scripting (XSS)Codebangers All in One Time Clock Lite
- CVE-2022-44582WordPress Apptivo Business Site CRM Plugin <= 3.0.12 is vulnerable to Cross Site Scripting (XSS)Apptivo Business Site CRM
- CVE-2022-44631WordPress 1app Business Forms Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)1app Technologies 1app Business Forms