Wordfence Intelligence   >   Vulnerability Researchers   >   Bob Matyas

Bob Matyas

15
All Time Ranking
226
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 41-60 of 226 Vulnerabilities

Sign-up Sheets <= 2.2.12 - Reflected Cross-Site Scripting
6.1
CVE-2024-6020
Aug 13, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Flaming Forms <= 1.0.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-7692
Aug 12, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP MultiTasking <= 0.1.12 - Reflected Cross-Site Scripting
6.1
CVE-2024-6859
Aug 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI']
6.1
CVE-2024-5744
Jul 23, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Product Editing
6.1
CVE-2024-6134
Jul 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Customer Search
6.1
CVE-2024-6133
Jul 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
House Manager – Easy Renter Management System for WordPress <= 1.0.8.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-3973
Jul 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Wp EMember < 10.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-5081
Jul 15, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
SpiderContacts <= 1.1.7 - Reflected Cross-Site Scripting
6.1
CVE-2024-6272
Jul 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-6226
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-5809
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Send email only on Reply to My Comment <= 1.0.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-6223
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Send email only on Reply to My Comment <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-6224
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ultimate Classified Listings <= 1.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-5883
Jul 8, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Category Editing
6.1
CVE-2024-6076
Jun 24, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via REQUEST_URI
6.1
CVE-2024-6072
Jun 24, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Customer Editing
6.1
CVE-2024-6074
Jun 24, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Discount Editing
6.1
CVE-2024-6073
Jun 24, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Affiliate Editing
6.1
CVE-2024-5281
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Registration Form
6.1
CVE-2024-5282
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Sign-up Sheets <= 2.2.12 - Reflected Cross-Site Scripting CVE-2024-6020 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 13, 2024
Flaming Forms <= 1.0.1 - Reflected Cross-Site Scripting CVE-2024-7692 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 12, 2024
WP MultiTasking <= 0.1.12 - Reflected Cross-Site Scripting CVE-2024-6859 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 10, 2024
WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI'] CVE-2024-5744 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 23, 2024
WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Product Editing CVE-2024-6134 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 19, 2024
WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Customer Search CVE-2024-6133 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 19, 2024
House Manager – Easy Renter Management System for WordPress <= 1.0.8.4 - Reflected Cross-Site Scripting CVE-2024-3973 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 16, 2024
Wp EMember < 10.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-5081 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 15, 2024
SpiderContacts <= 1.1.7 - Reflected Cross-Site Scripting CVE-2024-6272 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 10, 2024
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Reflected Cross-Site Scripting CVE-2024-6226 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 9, 2024
WP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site Scripting CVE-2024-5809 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 9, 2024
Send email only on Reply to My Comment <= 1.0.6 - Reflected Cross-Site Scripting CVE-2024-6223 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 9, 2024
Send email only on Reply to My Comment <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-6224 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 9, 2024
Ultimate Classified Listings <= 1.2 - Reflected Cross-Site Scripting CVE-2024-5883 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 8, 2024
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Category Editing CVE-2024-6076 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 24, 2024
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via REQUEST_URI CVE-2024-6072 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 24, 2024
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Customer Editing CVE-2024-6074 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 24, 2024
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Discount Editing CVE-2024-6073 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 24, 2024
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Affiliate Editing CVE-2024-5281 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Registration Form CVE-2024-5282 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation