CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- nfine rapid development platformNFine Rapid Development Platform access control4.3 Medium
- c-ares, fedoraproject fedora +1 moreAutoTools does not set CARES_RANDOM_FILE during cross compilation3.7 Low
- nfine rapid development platformNFine Rapid Development Platform CheckLogin weak hash3.7 Low
- tibco ebx add-onsTIBCO EBX® Add-ons Path Traversal7.7 High
- tibco ebx add-onsTIBCO EBX Add-ons Arbitrary File Write9.1 Critical
- dfir-iris iris, iris-web +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web6.3 Medium
- pendulum-project ntpd-rsImproper handling of NTS cookie length that could crash the ntpd-rs server7.5 High
- kyvernokyverno seccomp control can be circumvented4.6 Medium
- saleorNon-constant time HMAC comparison in Adyen plugin in Saleor4.8 Medium
openexrOSS-FuzzHeap-buffer-overflow in libdeflate_zlib_decompress_exNo score- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server allow remote attackers who have read permissions...4.3 Medium
- htmlunitDenial of service in HtmlUnit7.5 High
- agt tech ceppatronSQLi in Ceppatron9.8 Critical
- m-files, m-files client +1 moreElevation of Privilege in M-Files Desktop Client7.5 High
- phpokPHPOK unrestricted upload4.7 Medium
- wordpress performance labWordPress Performance Lab Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- jason crouse, veronalabs slimstat analyticsWordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
opam-repositoryopamTime of check time of use issue in opam's cache7.1 High- simple share buttons adder, simplesharebuttons simple share buttons adder +1 moreWordPress Simple Share Buttons Adder Plugin <= 8.4.7 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wpmanageninja ninja tables, wpmanageninja llc ninja tables – best data table plugin for wordpress +1 moreWordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- frenify mediamatic, plugincraft mediamatic – media library folders +1 moreWordPress Mediamatic – Media Library Folders Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- orion woocommerce products designerWordPress Woocommerce Product Designer Plugin <= 4.3.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- villatheme thank you page customizer for woocommerce – increase your sales, woocommerce thank you page customizer +1 moreWordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- pierre lebedel kodex posts likesWordPress Kodex Posts likes Plugin <= 2.4.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wpjoli joli table of contentsWordPress Joli Table Of Contents Plugin <= 1.3.9 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- stylemixthemes gdpr compliance & cookie consent, gdpr compliance \& cookie consent +1 moreWordPress GDPR Compliance & Cookie Consent Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wpmet shopengineWordPress ShopEngine Plugin <= 4.1.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- stylemix motors – car dealer, classifieds & listing, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreWordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- stylemix wordpress header builder plugin – pearl, stylemixthemes pearl header builder +1 moreWordPress Pearl Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- sound4 ltd. streamWordPress Stream Plugin <= 3.9.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- badgeosWordPress BadgeOS Plugin <= 3.7.1.6 is vulnerable to Cross Site Request Forgery (CSRF)6.3 Medium
- tyche softwares custom order numbers for woocommerceWordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wp easy pay easypay – square for wordpress, wpeasypay wp easypay, wpexpertsio wp easypay – square for wordpress +2 moreWordPress WP EasyPay Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
golang-github-vpenso-prometheus_slurm_exporteropenSUSESecurity update for golang-github-vpenso-prometheus_slurm_exporterNo score- upress enable accessibilityWordPress Enable Accessibility Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- pretty links links, upress enable accessibility +1 moreWordPress Shortlinks by Pretty Links Plugin <= 3.4.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- coscheduleWordPress CoSchedule Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- the wordpress.org community health check & troubleshooting, wordpress health check \& troubleshooting +1 moreWordPress Health Check & Troubleshooting Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- zorem advanced shipment tracking for woocommerceWordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- litespeed technologies cache, litespeedtech litespeed cache +1 moreWordPress LiteSpeed Cache Plugin <= 5.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- villatheme thank you page customizer for woocommerce – increase your sales, woocommerce thank you page customizer +1 moreWordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- bulk resize media project resize media, marty thornley bulk resize media +1 moreWordPress Bulk Resize Media Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- cbot core, panel, chatbot +2 moreUser Authentication Bypass in CBOT's Chatbot9.8 Critical
- import external images project external images, marty thornley import external images +1 moreWordPress Import External Images Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- cbot core, panel, chatbot +2 moreCross-Site WebSocket Hijacking in CBOT's Chatbot4.3 Medium
- cbot core, panel, chatbot +2 moreChannel Accessible by Non-Endpoint in CBOT's Chatbot8.1 High
- mage-people event manager and tickets selling plugin for woocommerceWordPress Event Manager for WooCommerce Plugin <= 3.7.7 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- cbot core, panel, chatbot +2 moreInsecure Randomness in CBOT's Chatbot9.8 Critical
- cbot core, panel, chatbot +2 moreIDOR in CBOT's Chatbot8.8 High
- cbot core, panel, chatbot +2 morePrivilege Escalation in CBOT's Chatbot9.8 Critical
- Show moreLoading…