Wordfence Intelligence   >   Vulnerability Researchers   >   Bob Matyas

Bob Matyas

15
All Time Ranking
226
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 61-80 of 226 Vulnerabilities

OpenPGP Form Encryption for WordPress <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
5.4
CVE-2024-3919
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Embed Peertube Playlist <= 1.07 - Authenticated (Editor+) Stored Cross-Site Scripting
4.4
CVE-2024-4602
Jun 22, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Banner Editing
6.1
CVE-2024-5286
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Registration Form
6.1
CVE-2024-5282
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Affiliate Editing
6.1
CVE-2024-5281
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Affiliate Platform < 6.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-5284
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via Member Edit
6.1
CVE-2024-5715
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Wp EMember <= 10.6.5 - Cross-Site Request Forgery
6.1
CVE-2024-5077
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
If-So Dynamic Content Personalization <= 1.8.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-6070
Jun 22, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
If-So Dynamic Content Personalization <= 1.8.0.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-5713
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Bug Library <= 2.1 - Unauthenticated Arbitrary File Upload
9.8
CVE-2024-5450
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Product Enquiry for WooCommerce <= 3.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-3964
Jun 22, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Hostel <= 1.1.5.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-3753
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Smart Image Gallery <= 1.0.18 - Cross-Site Request Forgery
4.3
CVE-2024-3632
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Affiliate Platform < 6.5.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
6.1
CVE-2024-5287
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Wp EMember <= 10.6.6 - Unauthenticated Stored Cross-Site Scripting
6.1
CVE-2024-5079
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Wp EMember <= 10.6.5 - Authenticated (Admin+) Arbitrary File Upload
9.1
CVE-2024-5080
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Wp EMember <= 10.6.5 - Cross-Site Request Forgery to Bulk Delete
4.3
CVE-2024-5076
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP eMember <= 10.6.5 - Reflected Cross-Site Scripting via 'editrecord'
6.1
CVE-2024-5075
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Affiliate Platform < 6.5.1 - Cross-Site Request Forgery to Profile Update
5.4
CVE-2024-5287
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
OpenPGP Form Encryption for WordPress <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-3919 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N June 22, 2024
Embed Peertube Playlist <= 1.07 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2024-4602 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 22, 2024
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Banner Editing CVE-2024-5286 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Registration Form CVE-2024-5282 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Affiliate Editing CVE-2024-5281 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
WP Affiliate Platform < 6.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-5284 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via Member Edit CVE-2024-5715 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
Wp EMember <= 10.6.5 - Cross-Site Request Forgery CVE-2024-5077 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
If-So Dynamic Content Personalization <= 1.8.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-6070 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 22, 2024
If-So Dynamic Content Personalization <= 1.8.0.3 - Reflected Cross-Site Scripting CVE-2024-5713 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
Bug Library <= 2.1 - Unauthenticated Arbitrary File Upload CVE-2024-5450 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 22, 2024
Product Enquiry for WooCommerce <= 3.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-3964 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 22, 2024
Hostel <= 1.1.5.2 - Reflected Cross-Site Scripting CVE-2024-3753 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
Smart Image Gallery <= 1.0.18 - Cross-Site Request Forgery CVE-2024-3632 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 22, 2024
WP Affiliate Platform < 6.5.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting CVE-2024-5287 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
Wp EMember <= 10.6.6 - Unauthenticated Stored Cross-Site Scripting CVE-2024-5079 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
Wp EMember <= 10.6.5 - Authenticated (Admin+) Arbitrary File Upload CVE-2024-5080 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H June 22, 2024
Wp EMember <= 10.6.5 - Cross-Site Request Forgery to Bulk Delete CVE-2024-5076 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 22, 2024
WP eMember <= 10.6.5 - Reflected Cross-Site Scripting via 'editrecord' CVE-2024-5075 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
WP Affiliate Platform < 6.5.1 - Cross-Site Request Forgery to Profile Update CVE-2024-5287 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N June 22, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation