Wordfence Intelligence   >   Vulnerability Researchers   >   Ananda Dhakal

Ananda Dhakal

58
All Time Ranking
55
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 1-20 of 55 Vulnerabilities

LatePoint <= 4.9.91 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2024-43992
Aug 29, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Login As Users <= 1.4.3 - Missing Authorization to Privielge Escalation via Account Takeover
8.8
CVE-2024-43982
Aug 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SendGrid for WordPress <= 1.4 - Unauthenticated SQL Injection
10.0
CVE-2024-43965
Aug 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
JobSearch <= 2.5.4 - Missing Authorization
4.3
CVE-2024-43928
Aug 26, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
JobSearch <= 2.5.4 - Missing Authorization
5.3
CVE-2024-43929
Aug 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
JobSearch <= 2.5.3 - Cross-Site Request Forgery
4.3
CVE-2024-43930
Aug 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
JobSearch <= 2.5.3 - Unauthenticated PHP Object Injection
10.0
CVE-2024-43931
Aug 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
LatePoint <= 4.9.91 - Cross-Site Request Forgery
4.3
CVE-2024-43945
Aug 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Memberpress <= 1.11.29 - Missing Authorization
5.3
CVE-2024-43956
Aug 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Flash & HTML5 Video <= 2.5.31 - Authenticated (Subscriber+) Information Exposure
4.3
CVE-2024-43319
Aug 16, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
wpForo Forum <= 2.3.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
4.3
CVE-2024-43288
Aug 16, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Flash & HTML5 Video <= 2.5.30 - Missing Authorization
6.4
CVE-2024-43296
Aug 16, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WP User Manager <= 2.9.10 - Cross-Site Request Forgery
4.3
CVE-2024-43336
Aug 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Data Access <= 5.5.7 - Cross-Site Request Forgery
4.3
CVE-2024-43295
Aug 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Brave Popup Builder <= 0.7.0 - Cross-Site Request Forgery
4.3
CVE-2024-43337
Aug 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AFI – The Easiest Integration Plugin <= 1.89.4 - Cross-Site Request Forgery
4.3
CVE-2024-43340
Aug 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Clone <= 2.4.5 - Missing Authorization
4.3
CVE-2024-43298
Aug 16, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Asset CleanUp: Page Speed Booster <= 1.3.9.3 - Missing Authorization
4.3
CVE-2024-43314
Aug 16, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WOOCS – WooCommerce Currency Switcher <= 1.4.2 - Missing Authorization
4.3
CVE-2024-43297
Aug 16, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
UsersWP <= 1.2.15 - Missing Authorization
5.3
CVE-2024-43277
Aug 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
LatePoint <= 4.9.91 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-43992 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N August 29, 2024
Login As Users <= 1.4.3 - Missing Authorization to Privielge Escalation via Account Takeover CVE-2024-43982 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H August 28, 2024
SendGrid for WordPress <= 1.4 - Unauthenticated SQL Injection CVE-2024-43965 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 26, 2024
JobSearch <= 2.5.4 - Missing Authorization CVE-2024-43928 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N August 26, 2024
JobSearch <= 2.5.4 - Missing Authorization CVE-2024-43929 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 26, 2024
JobSearch <= 2.5.3 - Cross-Site Request Forgery CVE-2024-43930 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 26, 2024
JobSearch <= 2.5.3 - Unauthenticated PHP Object Injection CVE-2024-43931 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 26, 2024
LatePoint <= 4.9.91 - Cross-Site Request Forgery CVE-2024-43945 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 26, 2024
Memberpress <= 1.11.29 - Missing Authorization CVE-2024-43956 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 26, 2024
Flash & HTML5 Video <= 2.5.31 - Authenticated (Subscriber+) Information Exposure CVE-2024-43319 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N August 16, 2024
wpForo Forum <= 2.3.4 - Authenticated (Subscriber+) Insecure Direct Object Reference CVE-2024-43288 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N August 16, 2024
Flash & HTML5 Video <= 2.5.30 - Missing Authorization CVE-2024-43296 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N August 16, 2024
WP User Manager <= 2.9.10 - Cross-Site Request Forgery CVE-2024-43336 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2024
WP Data Access <= 5.5.7 - Cross-Site Request Forgery CVE-2024-43295 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2024
Brave Popup Builder <= 0.7.0 - Cross-Site Request Forgery CVE-2024-43337 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2024
AFI – The Easiest Integration Plugin <= 1.89.4 - Cross-Site Request Forgery CVE-2024-43340 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2024
Clone <= 2.4.5 - Missing Authorization CVE-2024-43298 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N August 16, 2024
Asset CleanUp: Page Speed Booster <= 1.3.9.3 - Missing Authorization CVE-2024-43314 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N August 16, 2024
WOOCS – WooCommerce Currency Switcher <= 1.4.2 - Missing Authorization CVE-2024-43297 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N August 16, 2024
UsersWP <= 1.2.15 - Missing Authorization CVE-2024-43277 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 16, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation