CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- github cmark-gfmcmark-gfm Quadratic complexity bugs may lead to a denial of service3.5 Low
- spotipy-dev spotipyspotipy Path traversal vulnerability that may lead to type confusion in URI handling code0.0 None
- hapifhir hl7 fhir core, hl7 fhir ig publisher +1 moreMITM based Zip Slip in `ca.uhn.hapi.fhir:org.hl7.fhir.core`8.1 High
- bob goetz wp-topbar, wp topbar project topbar +1 moreWordPress WP TopBar Plugin <= 5.36 is vulnerable to SQL Injection6.7 Medium
- túbal martín youtube shortcode, youtube shortcode project shortcode +1 moreWordPress Youtube shortcode Plugin <= 1.8.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- alexei isaenko oi yandex.maps for wordpress, oi yandex.maps project yandex.maps +1 moreWordPress Oi Yandex.Maps for WordPress Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- lenovo safecenterA denial-of-service vulnerability has been identified in Lenovo Safecenter that could allow a...6.2 Medium
- aleksandar urošević my youtube channel, my youtube channel project youtube channel +1 moreMy YouTube Channel <= 3.0.12.1 - Missing Authorization4.3 Medium
- lenovo bios, ideapad y700-14isk firmware +1 moreA potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK...6.7 Medium
- aleksandar urošević my youtube channel, my youtube channel project youtube channel +1 moreMy YouTube Channel <= 3.0.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5 Medium
- lenovo bios, d330-10igl firmware, ideapad 5 pro 16arh7 firmware +42 more +44 moreA potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may...6.7 Medium
- lenovo 100e 2nd gen firmware, 100w gen 3 firmware, 13w yoga firmware +68 more +70 moreA buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow...6.7 Medium
- lenovo bios, thinkbook 14-iil firmware, thinkbook 14-iml firmware +4 more +6 moreA buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow...6.7 Medium
- lenovo bios, thinkbook 14-iil firmware, thinkbook 14-iml firmware +4 more +6 moreA buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an...6.7 Medium
- aidreform project aidreform, chimpgroup bolster, spikes +8 more +10 moreMultiple themes - Unauthenticated Arbitrary File Upload9.8 Critical
- ayecode geodirectoryGeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode5.4 Medium
- pluginops landing page builderLanding Page Builder < 1.4.9.9 - Contributor+ Cross-Site Scripting via Shortcode5.4 Medium
- unknown passster, passster project passter +1 morePassster < 3.5.5.8 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- tips and tricks hq compact wp audio playerCompact WP Audio Player < 1.9.8 - Contributor+ Stored XSS5.4 Medium
- page-list project page-listPage-list < 5.3 - Contributor+ Stored XSS5.4 Medium
- unknown login as user or customer, wp-buy login as user or customer \(user switching\) +1 moreLogin as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin9.8 Critical
- wpsc-plugin structured content, unknown structured content (json-ld) #wpsc +1 moreStructured Content < 1.5.1 - Contributor+ Stored XSS in Shortcode5.4 Medium
- hasthemes hashbarHashBar – WordPress Notification Bar < 1.3.6 - Contributor+ Stored XSS via Shortcode5.4 Medium
- booster for woocommerce, pluggabl booster for woocommerce, pluggabl llc booster plus for woocommerce +3 more +5 moreBooster for WooCommerce - Multiple CSRF8.8 High
- pickplugins user verificationUser Verification < 1.0.94 - Authentication Bypass9.8 Critical
- unknown 10webmapbuilder, 10web map builder for google maps +1 more10WebMapBuilder < 1.0.72 - Contributor+ Stored XSS via Shortcode5.4 Medium
- code amp search & filter, codeamp search \& filter +1 moreSearch & Filter < 1.2.16 - Contributor+ Stored XSS5.4 Medium
- sevenspark shiftnavShiftNav – Responsive Mobile Menu < 1.7.2 - Contributor+ Stored XSS in Shortcode5.4 Medium
- unknown wp google my business auto publish, auto publish for google my business project publish for google my business +1 moreWP Google My Business Auto Publish < 3.4 - Contributor+ Stored XSS via Shortcode5.4 Medium
- ciphercoin wp limit login attemptsWP Limit Login Attempts <= 2.6.4 - IP Spoofing7.5 High
- baden03 print-o-maticPrint-O-Matic < 2.1.8 - Contributor+ Stored XSS via Shortcode5.4 Medium
- unknown optimize images alt text (alt tag) & names for seo using ai, imageseo optimize images alt text \(alt tag\) \& names for seo using ai +1 moreOptimize images ALT Text (alt tag) & names for SEO using AI < 2.0.8 - Settings Update via CSRF6.5 Medium
- sumo google analyticator, unknown analyticator +1 moreGoogle Analyticator < 6.5.6 - Admin+ PHP Object Injection7.2 High
- code atlantic content controlContent Control < 1.1.10 - Contributor+ Stored XSS5.4 Medium
- sumo google analyticator, unknown analyticator +1 moreGoogle Analyticator < 6.5.6 - Admin+ PHP Object Injection7.2 High
- unknown wp statisticsWP Statistics < 13.2.9 - Authenticated SQLi8.8 High
- sitemap project sitemapSitemap < 4.4 - Contributor+ Stored XSS5.4 Medium
- genesis columns advanced project columns advanced, unknown genesis columns advanced +1 moreGenesis Columns Advanced < 2.0.4 - Contributor+ Stored XSS via Shortcode5.4 Medium
- back2nature word balloonWord Balloon < 4.19.3 - Contributor+ Stored XSS via Shortcode5.4 Medium
- codeboxr cbx petition for wordpressCBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLi9.8 Critical
- eu cookie law project cookie law, unknown eu cookie law for gdpr/ccpa +1 moreEU Cookie Law <= 3.1.6 - Admin+ Stored XSS4.8 Medium
- ajay top 10, top 10 project 10 +1 moreTop 10 < 3.2.3 - Contributor+ Stored XSS5.4 Medium
- easy social feed social feed, easysocialfeed easy social feed +1 moreEasy Social Feed – Social Photos Gallery – Post Feed – Like Box < 6.4.0 - Contributor+ Stored XSS5.4 Medium
- mongoosemarketplace mongoose page pluginMongoose Page Plugin < 1.9.0 - Contributor+ Stored XSS via Shortcode5.4 Medium
- unknown wpzoom portfolio, wpzoom portfolio +1 moreWPZOOM Portfolio < 1.2.2 - Contributor+ Stored XSS via Shortcode5.4 Medium
- twinpictures collapse-o-maticCollapse-O-Matic < 1.8.3 - Contributor+ Stored XSS5.4 Medium
- brutebankBruteBank - WP Security & Firewall < 1.9 - Settings Update via CSRF6.5 Medium
- unknown fluentauthFluentAuth < 1.0.2 - Bypass blocks by IP Spoofing7.5 High
- easy bootstrap shortcode project bootstrap shortcode, unknown easy bootstrap shortcode +1 moreEasy Bootstrap Shortcode <= 4.5.4 - Contributor+ Stored XSS5.4 Medium
- gsplugins gs logo sliderGS Logo Slider < 3.3.8 - Contributor+ Stored XSS in Shortcode5.4 Medium
- Show moreLoading…