Week 52, 2023
25 December to 31 December 2023. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 469CVEs publishedin the whole week
- 82CriticalCVSS 9.0 and above
- 139HighCVSS 7.0 to 8.9
- 0Added to KEVknown exploited, newly listed
Most severe new CVEsBy CVSS score
- CVE-2023-7163
D-Link D-View 8 Unauthenticated Probe-Core Server Communication
D-Link · D-View 8
Critical10.0 - CVE-2023-25054
WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Remote Code Execution (RCE)
David F. Carr · RSVPMaker
Critical10.0 - CVE-2023-52181
WordPress Theme per user Plugin <= 1.0.1 is vulnerable to PHP Object Injection
Presslabs · Theme per user
Critical10.0 - CVE-2023-51505
WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to PHP Object Injection
realmag777 · Active Products Tables for WooCommerce. Professional products tables for WooCommerce store
Critical10.0 - CVE-2023-51419
WordPress BERTHA AI Plugin <= 1.11.10.7 is vulnerable to Arbitrary File Upload
Bertha.ai · BERTHA AI. Your AI co-pilot for WordPress and Chrome
Critical10.0 - CVE-2023-51468
WordPress Rencontre – Dating Site Plugin <= 3.10.1 is vulnerable to Arbitrary File Upload
Jacques Malgrange · Rencontre – Dating Site
Critical10.0 - CVE-2023-51411
WordPress Frontend Admin by DynamiApps Plugin <= 3.18.3 is vulnerable to Arbitrary File Upload
Shabti Kaplan · Frontend Admin by DynamiApps
Critical10.0 - CVE-2023-51473
WordPress TerraClassifieds Plugin <= 2.0.3 is vulnerable to Arbitrary File Upload
Pixelemu · TerraClassifieds – Simple Classifieds Plugin
Critical10.0 - CVE-2023-51475
WordPress WP MLM Unilevel Plugin <= 4.0 is vulnerable to Arbitrary File Upload
IOSS · WP MLM SOFTWARE PLUGIN
Critical10.0 - CVE-2023-47840
WordPress Qode Essential Addons Plugin <= 1.5.2 is vulnerable to Remote Code Execution (RCE)
Qode Interactive · Qode Essential Addons
Critical9.9