Wordfence Intelligence   >   Vulnerability Researchers   >   Bob Matyas

Bob Matyas

15
All Time Ranking
226
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 21-40 of 226 Vulnerabilities

DL Robots.txt <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-6797
Aug 10, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2024-6925
Aug 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Viral Signup <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-6927
Aug 7, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
DL Yandex Metrika <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-6462
Aug 6, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI']
6.1
CVE-2024-5744
Jul 23, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eStore <= 8.5.5 - Cross-Site Request Forgery to Settings Reset
4.3
CVE-2024-6136
Jul 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Customer Search
6.1
CVE-2024-6133
Jul 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Product Editing
6.1
CVE-2024-6134
Jul 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
House Manager – Easy Renter Management System for WordPress <= 1.0.8.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-3973
Jul 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Wp EMember < 10.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-5081
Jul 15, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Community Events <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-6270
Jul 15, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
WooCommerce Customers Manager < 30.1 - Cross-Site Request Forgery to Customer Deletion
5.4
CVE-2024-3983
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
WooCommerce Customers Manager < 30.1 - Cross-Site Request Forgery to Customer Deletion via 'Delete'
5.4
CVE-2024-2843
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
WANotifier – Send Message Notifications Using WhatsApp API <= 2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-6165
Jul 10, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
SpiderContacts <= 1.1.7 - Reflected Cross-Site Scripting
6.1
CVE-2024-6272
Jul 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
HTML Forms – Simple WordPress Forms Plugin <= 1.3.33 - Cross-Site Request Forgery
4.3
CVE-2024-6412
Jul 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Ajax Contact Form <= 2.2.2 - Cross-Site Request Forgery to Arbitrary Email Deletion
4.3
CVE-2024-5808
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-6226
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-5809
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Pardakht Delkhah <= 2.9.8 - Cross-Site Request Forgery to Form Setting Reset
4.3
CVE-2024-6230
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
DL Robots.txt <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-6797 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N August 10, 2024
TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update CVE-2024-6925 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 10, 2024
Viral Signup <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-6927 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N August 7, 2024
DL Yandex Metrika <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-6462 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N August 6, 2024
WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI'] CVE-2024-5744 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 23, 2024
WP eStore <= 8.5.5 - Cross-Site Request Forgery to Settings Reset CVE-2024-6136 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 19, 2024
WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Customer Search CVE-2024-6133 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 19, 2024
WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Product Editing CVE-2024-6134 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 19, 2024
House Manager – Easy Renter Management System for WordPress <= 1.0.8.4 - Reflected Cross-Site Scripting CVE-2024-3973 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 16, 2024
Wp EMember < 10.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-5081 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 15, 2024
Community Events <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-6270 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N July 15, 2024
WooCommerce Customers Manager < 30.1 - Cross-Site Request Forgery to Customer Deletion CVE-2024-3983 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L July 11, 2024
WooCommerce Customers Manager < 30.1 - Cross-Site Request Forgery to Customer Deletion via 'Delete' CVE-2024-2843 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L July 11, 2024
WANotifier – Send Message Notifications Using WhatsApp API <= 2.6 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-6165 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N July 10, 2024
SpiderContacts <= 1.1.7 - Reflected Cross-Site Scripting CVE-2024-6272 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 10, 2024
HTML Forms – Simple WordPress Forms Plugin <= 1.3.33 - Cross-Site Request Forgery CVE-2024-6412 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 10, 2024
WP Ajax Contact Form <= 2.2.2 - Cross-Site Request Forgery to Arbitrary Email Deletion CVE-2024-5808 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 9, 2024
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Reflected Cross-Site Scripting CVE-2024-6226 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 9, 2024
WP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site Scripting CVE-2024-5809 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 9, 2024
Pardakht Delkhah <= 2.9.8 - Cross-Site Request Forgery to Form Setting Reset CVE-2024-6230 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 9, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation