# CVEs published 2023-05-25

78 CVEs were published on May 25, 2023: 11 critical, 14 high. Days are UTC.

- [CVE-2023-32074](https://cve.now/CVE-2023-32074.md): Nextcloud user\_oidc app is missing brute force protection (CVSS 8.0, nextcloud security-advisories)
- [CVE-2023-32067](https://cve.now/CVE-2023-32067.md): 0-byte UDP payload DoS in c-ares (CVSS 7.5, c-ares)
- [CVE-2023-2903](https://cve.now/CVE-2023-2903.md): NFine Rapid Development Platform access control (CVSS 4.3, NFine Rapid Development Platform)
- [CVE-2023-2902](https://cve.now/CVE-2023-2902.md): NFine Rapid Development Platform access control (CVSS 4.3, NFine Rapid Development Platform)
- [CVE-2023-31147](https://cve.now/CVE-2023-31147.md): Insufficient randomness in generation of DNS query IDs in c-ares (CVSS 5.9, c-ares)
- [CVE-2023-31130](https://cve.now/CVE-2023-31130.md): Buffer Underwrite in ares\_inet\_net\_pton() (CVSS 4.1, c-ares)
- [CVE-2023-2901](https://cve.now/CVE-2023-2901.md): NFine Rapid Development Platform access control (CVSS 4.3, NFine Rapid Development Platform)
- [CVE-2023-31124](https://cve.now/CVE-2023-31124.md): AutoTools does not set CARES\_RANDOM\_FILE during cross compilation (CVSS 3.7, c-ares)
- [CVE-2023-2900](https://cve.now/CVE-2023-2900.md): NFine Rapid Development Platform CheckLogin weak hash (CVSS 3.7, NFine Rapid Development Platform)
- [CVE-2023-26215](https://cve.now/CVE-2023-26215.md): TIBCO EBX® Add-ons Path Traversal (CVSS 7.7, TIBCO Software TIBCO EBX Add-ons)
- [CVE-2023-26216](https://cve.now/CVE-2023-26216.md): TIBCO EBX Add-ons Arbitrary File Write (CVSS 9.1, TIBCO Software TIBCO EBX Add-ons)
- [CVE-2023-30851](https://cve.now/CVE-2023-30851.md): Potential HTTP policy bypass when using header rules in Cilium (CVSS 2.6, cilium · github.com/cilium/cilium)
- [CVE-2023-30615](https://cve.now/CVE-2023-30615.md): Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web (CVSS 6.3, dfir-iris iris-web)
- [CVE-2023-32694](https://cve.now/CVE-2023-32694.md): Non-constant time HMAC comparison in Adyen plugin in Saleor (CVSS 4.8, saleor)
- [CVE-2023-22504](https://cve.now/CVE-2023-22504.md): Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to u (CVSS 4.3, Atlassian Confluence Data Center · Atlassian Confluence Ser…)
- [CVE-2023-2798](https://cve.now/CVE-2023-2798.md): Denial of service in HtmlUnit (CVSS 7.5, htmlunit · org.htmlunit:htmlunit)
- [CVE-2023-2851](https://cve.now/CVE-2023-2851.md): SQLi in Ceppatron (CVSS 9.8, AGT Tech Ceppatron)
- [CVE-2023-2480](https://cve.now/CVE-2023-2480.md): Elevation of Privilege in M-Files Desktop Client (CVSS 7.5, M-Files Client)
- [CVE-2023-0459](https://cve.now/CVE-2023-0459.md): Copy\_from\_user Spectre-V1 Gadget in Linux Kernel (CVSS 6.5, Linux Kernel)
- [CVE-2023-2888](https://cve.now/CVE-2023-2888.md): PHPOK unrestricted upload (CVSS 4.7, PHPOK)
- [CVE-2022-47174](https://cve.now/CVE-2022-47174.md): WordPress Performance Lab Plugin \<= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, WordPress Performance Team Performance Lab)
- [CVE-2022-45366](https://cve.now/CVE-2022-45366.md): WordPress Slimstat Analytics Plugin \<= 5.0.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Jason Crouse, VeronaLabs Slimstat Analytics)
- [CVE-2022-47178](https://cve.now/CVE-2022-47178.md): WordPress Simple Share Buttons Adder Plugin \<= 8.4.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Simple Share Buttons Adder)
- [CVE-2022-47136](https://cve.now/CVE-2022-47136.md): WordPress Ninja Tables Plugin \<= 4.3.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, WPManageNinja Ninja Tables – Best Data Table Plugin for Wor…)
- [CVE-2022-47144](https://cve.now/CVE-2022-47144.md): WordPress Mediamatic – Media Library Folders Plugin \<= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Plugincraft Mediamatic – Media Library Folders)
- [CVE-2022-46856](https://cve.now/CVE-2022-46856.md): WordPress Woocommerce Product Designer Plugin \<= 4.3.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, ORION Woocommerce Products Designer)
- [CVE-2022-46810](https://cve.now/CVE-2022-46810.md): WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin \<= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, VillaTheme Thank You Page Customizer for WooCommerce – Incr…)
- [CVE-2022-46814](https://cve.now/CVE-2022-46814.md): WordPress Kodex Posts likes Plugin \<= 2.4.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Pierre Lebedel Kodex Posts likes)
- [CVE-2022-46820](https://cve.now/CVE-2022-46820.md): WordPress Joli Table Of Contents Plugin \<= 1.3.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, WPJoli Joli Table Of Contents)
- [CVE-2022-45815](https://cve.now/CVE-2022-45815.md): WordPress GDPR Compliance & Cookie Consent Plugin \<= 1.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, StylemixThemes GDPR Compliance & Cookie Consent)
- [CVE-2022-45371](https://cve.now/CVE-2022-45371.md): WordPress ShopEngine Plugin \<= 4.1.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Wpmet ShopEngine)
- [CVE-2022-38716](https://cve.now/CVE-2022-38716.md): WordPress Motors – Car Dealer & Classified Ads Plugin \<= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, StylemixThemes Motors – Car Dealer, Classifieds & Listing)
- [CVE-2022-38356](https://cve.now/CVE-2022-38356.md): WordPress Pearl Plugin \<= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, StylemixThemes WordPress Header Builder Plugin – Pearl)
- [CVE-2022-43490](https://cve.now/CVE-2022-43490.md): WordPress Stream Plugin \<= 3.9.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, XWP Stream)
- [CVE-2022-41987](https://cve.now/CVE-2022-41987.md): WordPress BadgeOS Plugin \<= 3.7.1.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 6.3, LearningTimes BadgeOS)
- [CVE-2022-45367](https://cve.now/CVE-2022-45367.md): WordPress Custom Order Numbers for WooCommerce Plugin \<= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Tyche Softwares Custom Order Numbers for WooCommerce)
- [CVE-2022-47177](https://cve.now/CVE-2022-47177.md): WordPress WP EasyPay Plugin \<= 4.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, WP Easy Pay WP EasyPay – Square for WordPress)
- [CVE-2023-30484](https://cve.now/CVE-2023-30484.md): WordPress Enable Accessibility Plugin \<= 1.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, uPress Enable Accessibility)
- [CVE-2022-47149](https://cve.now/CVE-2022-47149.md): WordPress Shortlinks by Pretty Links Plugin \<= 3.4.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Pretty Links)
- [CVE-2022-47165](https://cve.now/CVE-2022-47165.md): WordPress CoSchedule Plugin \<= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, CoSchedule)
- [CVE-2022-47161](https://cve.now/CVE-2022-47161.md): WordPress Health Check & Troubleshooting Plugin \<= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, The WordPress.org community Health Check & Troubleshooting)
- [CVE-2022-41635](https://cve.now/CVE-2022-41635.md): WordPress Advanced Shipment Tracking for WooCommerce Plugin \<= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Zorem Advanced Shipment Tracking for WooCommerce)
- [CVE-2022-46800](https://cve.now/CVE-2022-46800.md): WordPress LiteSpeed Cache Plugin \<= 5.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, LiteSpeed Technologies LiteSpeed Cache)
- [CVE-2022-46812](https://cve.now/CVE-2022-46812.md): WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin \<= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, VillaTheme Thank You Page Customizer for WooCommerce – Incr…)
- [CVE-2022-46865](https://cve.now/CVE-2022-46865.md): WordPress Bulk Resize Media Plugin \<= 1.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Marty Thornley Bulk Resize Media)
- [CVE-2023-2887](https://cve.now/CVE-2023-2887.md): User Authentication Bypass in CBOT's Chatbot (CVSS 9.8, CBOT Chatbot)
- [CVE-2022-46866](https://cve.now/CVE-2022-46866.md): WordPress Import External Images Plugin \<= 1.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Marty Thornley Import External Images)
- [CVE-2023-2886](https://cve.now/CVE-2023-2886.md): Cross-Site WebSocket Hijacking in CBOT's Chatbot (CVSS 4.3, CBOT Chatbot)
- [CVE-2023-2885](https://cve.now/CVE-2023-2885.md): Channel Accessible by Non-Endpoint in CBOT's Chatbot (CVSS 8.1, CBOT Chatbot)
- [CVE-2022-47164](https://cve.now/CVE-2022-47164.md): WordPress Event Manager for WooCommerce Plugin \<= 3.7.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, MagePeople Team Event Manager and Tickets Selling Plugin fo…)
- [CVE-2023-2884](https://cve.now/CVE-2023-2884.md): Insecure Randomness in CBOT's Chatbot (CVSS 9.8, CBOT Chatbot)
- [CVE-2023-2883](https://cve.now/CVE-2023-2883.md): IDOR in CBOT's Chatbot (CVSS 8.8, CBOT Chatbot)
- [CVE-2023-2882](https://cve.now/CVE-2023-2882.md): Privilege Escalation in CBOT's Chatbot (CVSS 9.8, CBOT Chatbot)
- [CVE-2022-47159](https://cve.now/CVE-2022-47159.md): WordPress Logaster Logo Generator Plugin \<= 1.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Logaster Logo Generator)
- [CVE-2022-47138](https://cve.now/CVE-2022-47138.md): WordPress LOGIN AND REGISTRATION ATTEMPTS LIMIT Plugin \<= 2.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, German Krutov LOGIN AND REGISTRATION ATTEMPTS LIMIT)
- [CVE-2022-47139](https://cve.now/CVE-2022-47139.md): WordPress WP Basic Elements Plugin \<= 5.2.15 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Damir Calusic WP Basic Elements)
- [CVE-2022-47135](https://cve.now/CVE-2022-47135.md): WordPress Chronoforms Plugin \<= 7.0.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, chronoengine.com Chronoforms)
- [CVE-2022-46907](https://cve.now/CVE-2022-46907.md): Apache JSPWiki: XSS Injection points in several plugins (medium (no CVSS), Apache Software Foundation Apache JSPWiki · org.apache.j… +1)
- [CVE-2023-2732](https://cve.now/CVE-2023-2732.md): MStore API \<= 3.9.2 - Authentication Bypass (CVSS 9.8, inspireui MStore API – Create Native Android & iOS Apps On…)
- [CVE-2023-2733](https://cve.now/CVE-2023-2733.md): MStore API \<= 3.9.0 - Authentication Bypass (CVSS 9.8, inspireui MStore API – Create Native Android & iOS Apps On…)
- [CVE-2023-2734](https://cve.now/CVE-2023-2734.md): MStore API \<= 3.9.1 - Authentication Bypass (CVSS 9.8, inspireui MStore API – Create Native Android & iOS Apps On…)
- [CVE-2023-0950](https://cve.now/CVE-2023-0950.md): Array Index UnderFlow in Calc Formula Parsing (CVSS 7.8, The Document Foundation LibreOffice)
- [CVE-2023-2255](https://cve.now/CVE-2023-2255.md): Remote documents loaded without prompt via IFrame (no CVSS, The Document Foundation LibreOffice)
- [CVE-2023-25439](https://cve.now/CVE-2023-25439.md): Stored Cross Site Scripting (XSS) vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitrary code via the des (CVSS 6.1)
- [CVE-2023-27529](https://cve.now/CVE-2023-27529.md): Wacom Tablet Driver installer prior to 6.4.2-1 (for macOS) contains an improper link resolution before file access vulnerability. (CVSS 7.8, Wacom Tablet Driver installer)
- [CVE-2023-2804](https://cve.now/CVE-2023-2804.md): A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2\_merged\_upsample\_internal() function of jdmrgext.c file. (CVSS 6.5, libjpeg-turbo)
- [CVE-2023-28370](https://cve.now/CVE-2023-28370.md): Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrar (CVSS 6.1, tornadoweb Tornado · tornado)
- [CVE-2023-2881](https://cve.now/CVE-2023-2881.md): Storing Passwords in a Recoverable Format in pimcore/customer-data-framework (CVSS 6.7, pimcore/customer-data-framework · pimcore/customer-manageme…)
- [CVE-2023-31594](https://cve.now/CVE-2023-31594.md): IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network. (CVSS 7.5)
- [CVE-2023-31861](https://cve.now/CVE-2023-31861.md): ZLMediaKit 4.0 is vulnerable to Directory Traversal. (CVSS 7.5)
- [CVE-2023-33263](https://cve.now/CVE-2023-33263.md): In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory. (CVSS 7.5)
- [CVE-2023-33278](https://cve.now/CVE-2023-33278.md): In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP reques (CVSS 9.8)
- [CVE-2023-33279](https://cve.now/CVE-2023-33279.md): In the Store Commander scfixmyprestashop module through 2023-05-09 for PrestaShop, sensitive SQL calls can be executed with a trivial HTTP r (CVSS 9.8)
- [CVE-2023-33280](https://cve.now/CVE-2023-33280.md): In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HT (CVSS 9.8)
- [CVE-2023-33355](https://cve.now/CVE-2023-33355.md): IceCMS v1.0.0 has Insecure Permissions. (CVSS 7.5)
- [CVE-2023-33356](https://cve.now/CVE-2023-33356.md): IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2023-33750](https://cve.now/CVE-2023-33750.md): A stored cross-site scripting (XSS) vulnerability in mipjz v5.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted pa (CVSS 5.4)
- [CVE-2023-33751](https://cve.now/CVE-2023-33751.md): A stored cross-site scripting (XSS) vulnerability in mipjz v5.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted pa (CVSS 5.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-05-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.