# CVEs published 2023-05-06

9 CVEs were published on May 6, 2023: 0 critical, 1 high. Days are UTC.

- [CVE-2023-24400](https://cve.now/CVE-2023-24400.md): WordPress Cookie Notice & Compliance for GDPR / CCPA Plugin \<= 2.4.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Hu-manity.co Cookie Notice & Compliance for GDPR / CCPA)
- [CVE-2023-25491](https://cve.now/CVE-2023-25491.md): WordPress JCH Optimize Plugin \<= 3.2.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Samuel Marshall JCH Optimize)
- [CVE-2023-2560](https://cve.now/CVE-2023-2560.md): jja8 NewBingGoGo cross site scripting (CVSS 3.5, jja8 NewBingGoGo)
- [CVE-2023-26517](https://cve.now/CVE-2023-26517.md): WordPress Dashboard Widgets Suite Plugin \<= 3.2.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Jeff Starr Dashboard Widgets Suite)
- [CVE-2023-26519](https://cve.now/CVE-2023-26519.md): WordPress Publish to Schedule Plugin \<= 4.5.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Alex Benfica Publish to Schedule)
- [CVE-2022-43877](https://cve.now/CVE-2022-43877.md): IBM UrbanCode Deploy (UCD) information disclosure (CVSS 5.1, IBM UrbanCode Deploy)
- [CVE-2023-24957](https://cve.now/CVE-2023-24957.md): IBM Business Automation Workflow cross-site scripting (CVSS 5.4, IBM Business Automation Workflow)
- [CVE-2022-22313](https://cve.now/CVE-2022-22313.md): IBM QRadar Data Synchronization App information disclosure (CVSS 4.4, IBM QRadar Data Synchronization App)
- [CVE-2016-15031](https://cve.now/CVE-2016-15031.md): PHP-Login POST Parameter class.loginscript.php checkLogin sql injection (CVSS 7.3, PHP-Login)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-05-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.