Azienda Sicura

Lista CVE 2023/45xxx

CVE-2023-45001 (WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability)

CVE-2023-45002 (WordPress Seriously Simple Stats Plugin <= 1.5.0 is vulnerable to SQL Injection)

CVE-2023-45003 (WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability)

CVE-2023-45004 (WordPress Social Feed Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-45005 (WordPress Woo Custom Emails Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-45006 (WordPress Seriously Simple Stats Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-45007 (WordPress WooODT Lite Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-45008 (WordPress Fotomoto Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-45009 (WordPress Comment Reply Email Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-45010 (WordPress Captcha for Contact Form 7 plugin <= 1.11.3 - Capcha Bypass vulnerability)

CVE-2023-45011 (WordPress Complete Open Graph Plugin <= 3.4.5 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-45012 (WordPress WP Power Stats Plugin <= 2.2.3 is vulnerable to Cross Site Request Forgery (CSRF))

CVE-2023-45013 (Online Bus Booking System v1.0 – Multiple Unauthenticated SQL Injections (SQLi))

CVE-2023-45016 (Online Bus Booking System v1.0 – Multiple Unauthenticated SQL Injections (SQLi))

CVE-2023-45019 (Online Bus Booking System v1.0 – Multiple Unauthenticated SQL Injections (SQLi))