Wordfence Intelligence   >   Vulnerability Researchers   >   Bob Matyas

Bob Matyas

15
All Time Ranking
226
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 1-20 of 226 Vulnerabilities

MM-Breaking News <= 0.7.9 - Reflected Cross-Site Scripting
6.1
CVE-2024-8056
Aug 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Misiek Photo Album <= 1.4.3 - Cross-Site Request Forgery to Album Deletion
4.3
CVE-2024-7817
Aug 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Music Request Manager <= 1.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-6018
Aug 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Music Request Manager <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-6017
Aug 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Music Request Manager <= 1.3 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2024-6019
Aug 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
WP Content Copy Protection & No Right Click (PRO) <= 15.0 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-6693
Aug 20, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Pocket Widget <= 0.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-7918
Aug 19, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
AZIndex <= 0.8.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-7687
Aug 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AZIndex <= 0.8.1 - Cross-Site Request Forgery to Index Deletion
4.3
CVE-2024-7688
Aug 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Snapshot Backup <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-7689
Aug 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
KBucket: Your Curated Content in WordPress <= 4.1.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-6667
Aug 17, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NinjaTeam Header Footer Custom Code < 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via CSS Styles
4.4
CVE-2024-6617
Aug 15, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Chatbot with ChatGPT <= 2.4.4 - Missing Authorization
5.3
CVE-2024-6846
Aug 14, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Sign-up Sheets <= 2.2.12 - Reflected Cross-Site Scripting
6.1
CVE-2024-6020
Aug 13, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Secure Copy Content Protection and Content Locking <= 4.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-6888
Aug 13, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Flaming Forms <= 1.0.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-7692
Aug 12, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
DN Popup <= 1.2.2 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2024-7690
Aug 12, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Flaming Forms <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2024-7691
Aug 12, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
DL Robots.txt <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-6797
Aug 10, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2024-6925
Aug 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
MM-Breaking News <= 0.7.9 - Reflected Cross-Site Scripting CVE-2024-8056 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 22, 2024
Misiek Photo Album <= 1.4.3 - Cross-Site Request Forgery to Album Deletion CVE-2024-7817 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 22, 2024
Music Request Manager <= 1.3 - Reflected Cross-Site Scripting CVE-2024-6018 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 22, 2024
Music Request Manager <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-6017 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 22, 2024
Music Request Manager <= 1.3 - Unauthenticated Stored Cross-Site Scripting CVE-2024-6019 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N August 22, 2024
WP Content Copy Protection & No Right Click (PRO) <= 15.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-6693 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N August 20, 2024
Pocket Widget <= 0.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-7918 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N August 19, 2024
AZIndex <= 0.8.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-7687 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 19, 2024
AZIndex <= 0.8.1 - Cross-Site Request Forgery to Index Deletion CVE-2024-7688 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 19, 2024
Snapshot Backup <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-7689 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 19, 2024
KBucket: Your Curated Content in WordPress <= 4.1.4 - Reflected Cross-Site Scripting CVE-2024-6667 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 17, 2024
NinjaTeam Header Footer Custom Code < 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via CSS Styles CVE-2024-6617 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N August 15, 2024
Chatbot with ChatGPT <= 2.4.4 - Missing Authorization CVE-2024-6846 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 14, 2024
Sign-up Sheets <= 2.2.12 - Reflected Cross-Site Scripting CVE-2024-6020 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 13, 2024
Secure Copy Content Protection and Content Locking <= 4.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-6888 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N August 13, 2024
Flaming Forms <= 1.0.1 - Reflected Cross-Site Scripting CVE-2024-7692 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 12, 2024
DN Popup <= 1.2.2 - Cross-Site Request Forgery to Settings Update CVE-2024-7690 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 12, 2024
Flaming Forms <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting CVE-2024-7691 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N August 12, 2024
DL Robots.txt <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-6797 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N August 10, 2024
TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update CVE-2024-6925 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 10, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation