Wordfence Intelligence   >   Vulnerability Researchers   >   Bob Matyas

Bob Matyas

15
All Time Ranking
226
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 81-100 of 226 Vulnerabilities

WP Stacker <= 1.8.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-5003
May 17, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
FS Product Inquiry <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting
6.1
CVE-2024-4857
May 14, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
FS Product Inquiry <= 1.1.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-4856
May 14, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Pet Manager <= 1.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-3917
May 2, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Sailthru Triggermail <= 1.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-4289
Apr 30, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Fancy Product Designer <= 6.1.7 - Reflected Cross-Site Scripting
6.1
CVE-2024-0905
Apr 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-3823
Apr 24, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
reCAPTCHA Jetpack <= 0.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-3941
Apr 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WPB Show Core <= 2.6 - Reflected Cross-Site Scripting via 'file'
6.1
CVE-2024-1958
Apr 18, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
UnGallery <= 2.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-3582
Apr 18, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Add Custom CSS and JS <= 1.20 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-3903
Apr 18, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ENL Newsletter <= 1.0.1 - Cross-Site Request Forgery
6.1
CVE-2024-3058
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Bannerlid <= 1.1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-3048
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
MM-email2image <= 0.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-3076
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WPB Show Core <= 2.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-1956
Mar 18, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
FTP Access <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
6.1
CVE-2023-3510
Aug 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
PostX - Gutenberg Post Grid Blocks <= 3.0.5 - Reflected Cross-Site Scripting via 'postx_type'
6.1
CVE-2023-3992
Aug 2, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WooCommerce Customers Manager < 30.1 - Cross-Site Request Forgery to Customer Deletion
5.4
CVE-2024-3983
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
WooCommerce Customers Manager < 30.1 - Cross-Site Request Forgery to Customer Deletion via 'Delete'
5.4
CVE-2024-2843
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
WP Affiliate Platform <= 6.5.1 - Cross-Site Request Forgery to Afilliate Deletion
5.4
CVE-2024-5285
Jul 8, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
WP Stacker <= 1.8.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-5003 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 17, 2024
FS Product Inquiry <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting CVE-2024-4857 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 14, 2024
FS Product Inquiry <= 1.1.1 - Reflected Cross-Site Scripting CVE-2024-4856 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 14, 2024
Pet Manager <= 1.4 - Reflected Cross-Site Scripting CVE-2024-3917 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 2, 2024
Sailthru Triggermail <= 1.1 - Reflected Cross-Site Scripting CVE-2024-4289 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 30, 2024
Fancy Product Designer <= 6.1.7 - Reflected Cross-Site Scripting CVE-2024-0905 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 26, 2024
Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-3823 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 24, 2024
reCAPTCHA Jetpack <= 0.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-3941 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 19, 2024
WPB Show Core <= 2.6 - Reflected Cross-Site Scripting via 'file' CVE-2024-1958 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 18, 2024
UnGallery <= 2.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-3582 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 18, 2024
Add Custom CSS and JS <= 1.20 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-3903 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 18, 2024
ENL Newsletter <= 1.0.1 - Cross-Site Request Forgery CVE-2024-3058 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 5, 2024
Bannerlid <= 1.1.0 - Reflected Cross-Site Scripting CVE-2024-3048 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 5, 2024
MM-email2image <= 0.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-3076 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 5, 2024
WPB Show Core <= 2.6 - Reflected Cross-Site Scripting CVE-2024-1956 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 18, 2024
FTP Access <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2023-3510 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 22, 2023
PostX - Gutenberg Post Grid Blocks <= 3.0.5 - Reflected Cross-Site Scripting via 'postx_type' CVE-2023-3992 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 2, 2023
WooCommerce Customers Manager < 30.1 - Cross-Site Request Forgery to Customer Deletion CVE-2024-3983 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L July 11, 2024
WooCommerce Customers Manager < 30.1 - Cross-Site Request Forgery to Customer Deletion via 'Delete' CVE-2024-2843 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L July 11, 2024
WP Affiliate Platform <= 6.5.1 - Cross-Site Request Forgery to Afilliate Deletion CVE-2024-5285 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N July 8, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation