CVEs published November 18, 2023
41 CVEs were published on November 18, 2023: 0 critical, 3 high.
- Published
- 41
- Critical
- 0
- High
- 3
- Medium
- 29
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- org.opencrx:opencrx-core-models
- 8
- Arshid Easy Hide Login
- 1
- Best Restaurant Menu by PriceListo
- 1
- Code Snippets Pro Code Snippets
- 1
- CodeMShop 코드엠샵 마이사이트 – MSHOP MY SITE
- 1
- DroitThemes Droit Dark Mode
- 1
- edward_plainview Plainview Protect Passwords
- 1
- Gopi Ramasamy Vertical scroll recent post
- 1
- Himanshu Parashar Google Site Verification plugin using Met…
- 1
- IBM CICS TX Advanced
- 1
High 3
- CVE-2023-40363IBM InfoSphere Information Server privilege escalationIBM InfoSphere Information Server
- CVE-2023-6187Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Uploadstrangerstudios Paid Memberships Pro – Content Restriction,…
- CVE-2023-4214AppPresser <= 4.2.5 - Insecure Password Reset Mechanismscottopolis AppPresser – Mobile App Framework
Medium, low and unrated 38
- CVE-2023-28780WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Request Forgery (CSRF)Yoast Local Premium
- CVE-2023-31075WordPress Easy Hide Login Plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)Arshid Easy Hide Login
- CVE-2023-31089WordPress Video XML Sitemap Generator Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)Tradebooster Video XML Sitemap Generator
- CVE-2023-32245WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)WPDeveloper Essential Addons for Elementor Pro
- CVE-2023-32504WordPress Wise Chat Plugin <= 3.1.3 is vulnerable to Cross Site Request Forgery (CSRF)Kainex Wise Chat
- CVE-2023-32514WordPress Google Site Verification plugin using Meta Tag Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)Himanshu Parashar Google Site Verification plugin using Met…
- CVE-2023-25985WordPress WordPress Tooltips Plugin <= 8.2.5 is vulnerable to Cross Site Request Forgery (CSRF)Tomas | Docs | FAQ | Premium Support WordPress Tooltips
- CVE-2023-41129WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)Patreon WordPress
- CVE-2023-47243WordPress MSHOP MY SITE Plugin <= 1.1.6 is vulnerable to Broken Access ControlCodeMShop 코드엠샵 마이사이트 – MSHOP MY SITE
- CVE-2023-47519WordPress WooCommerce Product Table Lite Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)WC Product Table WooCommerce Product Table Lite
- CVE-2023-47531WordPress Droit Dark Mode Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)DroitThemes Droit Dark Mode
- CVE-2023-47551WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Request Forgery (CSRF)RedNao Donations Made Easy – Smart Donations
- CVE-2023-47552WordPress Image Hover Effects Plugin <= 5.5 is vulnerable to Cross Site Request Forgery (CSRF)Labib Ahmed Image Hover Effects – WordPress Plugin
- CVE-2023-47553WordPress UserHeat Plugin Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)User Local UserHeat Plugin
- CVE-2023-47556WordPress Device Theme Switcher Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)James Mehorter Device Theme Switcher
- CVE-2023-47644WordPress ProfileGrid Plugin <= 5.6.6 is vulnerable to Cross Site Request Forgery (CSRF)ProfileGrid – User Profiles, Memberships, Groups and Commun…
- CVE-2023-47649WordPress Best Restaurant Menu by PriceListo Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)Best Restaurant Menu by PriceListo
- CVE-2023-47650WordPress Add Local Avatar Plugin <= 12.1 is vulnerable to Cross Site Request Forgery (CSRF)Peter Sterling Add Local Avatar
- CVE-2023-47651WordPress WP Links Page Plugin <= 4.9.4 is vulnerable to Cross Site Request Forgery (CSRF)Robert Macchi WP Links Page
- CVE-2023-47655WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Request Forgery (CSRF)Marco Milesi ANAC XML Bandi di Gara
- CVE-2023-47664WordPress Plainview Protect Passwords Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)edward_plainview Plainview Protect Passwords
- CVE-2023-47666WordPress Code Snippets Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)Code Snippets Pro Code Snippets
- CVE-2023-47667WordPress WP Full Stripe Free plugin <= 7.0.16 - Cross Site Request Forgery (CSRF) vulnerability on every Setting SaveMammothology WP Full Stripe Free
- CVE-2023-47670WordPress Korea SNS Plugin <= 1.6.3 is vulnerable to Cross Site Request Forgery (CSRF)Jongmyoung Kim Korea SNS
- CVE-2023-47671WordPress Vertical scroll recent post Plugin <= 14.0 is vulnerable to Cross Site Request Forgery (CSRF)Gopi Ramasamy Vertical scroll recent post
- CVE-2023-47672WordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)Swashata WP Category Post List Widget
- CVE-2023-47685WordPress Preloader Matrix Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)Lukman Nakib Preloader Matrix
- CVE-2023-38361IBM CICS TX Advanced information disclosureIBM CICS TX Advanced
- CVE-2023-40809OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number.org.opencrx:opencrx-core-models
- CVE-2023-40810OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.org.opencrx:opencrx-core-models
- CVE-2023-40812OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.org.opencrx:opencrx-core-models
- CVE-2023-40813OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.org.opencrx:opencrx-core-models
- CVE-2023-40814OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.org.opencrx:opencrx-core-models
- CVE-2023-40815OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.org.opencrx:opencrx-core-models
- CVE-2023-40816OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.org.opencrx:opencrx-core-models
- CVE-2023-40817OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.org.opencrx:opencrx-core-models
- CVE-2023-48017Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management.
- CVE-2023-48736In International Color Consortium DemoIccMAX 3e7948b, CIccCLUT::Interp2d in IccTagLut.cpp in libSampleICC.a has an out-of-bounds read.