Is CVE-2023-2813 in the CISA KEV catalog?

No. CVE-2023-2813 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2023-2813?

CVE-2023-2813 has a CVSS v3 base score of 6.1 (MEDIUM).

What is the EPSS score for CVE-2023-2813?

CVE-2023-2813 has an EPSS score of 0.97% (58th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-2813?

Upgrade arendelle to 1.1.13 or later. Fixes are available for 20 affected products.

CVE & CISA-KEV Catalog

CVE-2023-2813

MEDIUM

6.1

CVSS v3

NVD

Description

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.

How to fix

Remediation Available

arendelleNVD

Affected:< 1.1.13Fixed in:1.1.13CVE-2023-2813derived from NVD

bazaar liteNVD

Affected:< 1.8.6Fixed in:1.8.6CVE-2023-2813derived from NVD

cafe bistroNVD

Affected:< 1.1.4Fixed in:1.1.4CVE-2023-2813derived from NVD

collegeNVD

Affected:< 1.5.1Fixed in:1.5.1CVE-2023-2813derived from NVD

directoryNVD

Affected:< 3.0.2Fixed in:3.0.2CVE-2023-2813derived from NVD

dropNVD

Affected:< 1.22Fixed in:1.22CVE-2023-2813derived from NVD

everseNVD

Affected:< 1.2.4Fixed in:1.2.4CVE-2023-2813derived from NVD

fullbaseNVD

Affected:< 1.2.1Fixed in:1.2.1CVE-2023-2813derived from NVD

ilexNVD

Affected:< 1.4.2Fixed in:1.4.2CVE-2023-2813derived from NVD

kataNVD

Affected:< 1.2.9Fixed in:1.2.9CVE-2023-2813derived from NVD

looki liteNVD

Affected:< 1.3.0Fixed in:1.3.0CVE-2023-2813derived from NVD

nokkeNVD

Affected:< 1.2.4Fixed in:1.2.4CVE-2023-2813derived from NVD

pinzoloNVD

Affected:< 1.2.10Fixed in:1.2.10CVE-2023-2813derived from NVD

platoNVD

Affected:< 1.1.9Fixed in:1.1.9CVE-2023-2813derived from NVD

restaurant ptNVD

Affected:< 1.1.3Fixed in:1.1.3CVE-2023-2813derived from NVD

saulNVD

Affected:< 1.1.0Fixed in:1.1.0CVE-2023-2813derived from NVD

saul liteNVD

Affected:< 1.4.6Fixed in:1.4.6CVE-2023-2813derived from NVD

viburnoNVD

Affected:< 1.3.2Fixed in:1.3.2CVE-2023-2813derived from NVD

wedding brideNVD

Affected:< 1.0.2Fixed in:1.0.2CVE-2023-2813derived from NVD

wlowNVD

Affected:< 1.2.7Fixed in:1.2.7CVE-2023-2813derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionRequired

ScopeChanged

Impact

ConfidentialityLow

IntegrityLow

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploit Intelligence

0.97%probability of exploitation in 30 days

58thpercentile

Moderate risk: more likely to be exploited than 58% of all known CVEs.

References

Exploit1

wpscan.com

Embed a live status badge for CVE-2023-2813

Markdown

[![CVE-2023-2813](https://tridentstack.com/cve/badge/CVE-2023-2813.svg)](https://tridentstack.com/cve/CVE-2023-2813)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-2813"><img src="https://tridentstack.com/cve/badge/CVE-2023-2813.svg" alt="CVE-2023-2813"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.