CVE-2023-51377

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Missing Authorization vulnerability in WPEverest Everest Forms.This issue affects Everest Forms: from n/a through 2.0.3.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

VendorProductVersions
WPEverestEverest Forms<= 2.0.3

References

Timeline

Published
Jun 14, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-513788.8Cross-Site Request Forgery (CSRF) vulnerability in Rise Themes Rise Blocks – A Complete Gutenberg Page Builder.This issue affects Rise BlockCVE-2023-513794.9An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be updated with an impropCVE-2023-51386.8Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B.CVE-2023-513804.3An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be read with an improperlCVE-2023-513845.5In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified CVE-2023-513856.5In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is refereCVE-2023-513863.3Sandbox Accounts for Events provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based CVE-2023-513878.8Hertzbeat is an open source, real-time monitoring system. Hertzbeat uses aviatorscript to evaluate alert expressions. The alert expressions CVE-2023-513889.8Hertzbeat is a real-time monitoring system. In `CalculateAlarm.java`, `AviatorEvaluator` is used to directly execute the expression functionCVE-2023-513899.8Hertzbeat is a real-time monitoring system. At the interface of `/define/yml`, SnakeYAML is used as a parser to parse yml content, but no seCVE-2023-51397.8Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driverCVE-2023-513907.5journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journal
CVE-2023-51377: Medium severity, CVSS 5.3 | Vulnix