Wordfence Intelligence   >   Vulnerability Researchers   >   Bob Matyas

Bob Matyas

15
All Time Ranking
226
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 121-140 of 226 Vulnerabilities

WordPress Plugin Tournamatch < 4.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-5644
Jun 22, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Embed Peertube Playlist <= 1.07 - Authenticated (Editor+) Stored Cross-Site Scripting
4.4
CVE-2024-4602
Jun 22, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Product Enquiry for WooCommerce <= 3.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-3964
Jun 22, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
If-So Dynamic Content Personalization <= 1.8.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-6070
Jun 22, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Simple Video Directory <= 1.4.3 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-5811
Jun 21, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Swift Framework < 2024.04.30 Authenticated (Admin+) Stored Cross-Site Scripting via Auth
4.4
CVE-2024-2696
Jun 21, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Frontend Checklist <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Items
4.4
CVE-2024-4959
Jun 5, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Video Widget <= 1.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-5169
Jun 5, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Widget Bundle <= 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-4970
May 31, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Google CSE <= 1.0.7 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-4755
May 31, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
CB (legacy) <= 0.9.4.18 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-4381
May 31, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
CSSable Countdown <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-4384
May 31, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Social Pixel <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-4005
May 24, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
WordPress Jitsi Shortcode <= 0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-3977
May 24, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Amen <= 3.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-3992
May 24, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
WP Backpack <= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-4756
May 17, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
ARforms <= 6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-4621
May 17, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Flattr <= 1.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-3920
May 2, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Sailthru Triggermail <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-4290
Apr 30, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Popup4Phone <= 1.3.2 - Authenticated (Editor+) Stored Cross-Site Scripting
4.4
CVE-2024-3580
Apr 26, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
WordPress Plugin Tournamatch < 4.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-5644 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 22, 2024
Embed Peertube Playlist <= 1.07 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2024-4602 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 22, 2024
Product Enquiry for WooCommerce <= 3.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-3964 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 22, 2024
If-So Dynamic Content Personalization <= 1.8.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-6070 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 22, 2024
Simple Video Directory <= 1.4.3 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-5811 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 21, 2024
Swift Framework < 2024.04.30 Authenticated (Admin+) Stored Cross-Site Scripting via Auth CVE-2024-2696 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 21, 2024
Frontend Checklist <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Items CVE-2024-4959 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 5, 2024
Video Widget <= 1.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-5169 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 5, 2024
Widget Bundle <= 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-4970 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 31, 2024
Google CSE <= 1.0.7 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-4755 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 31, 2024
CB (legacy) <= 0.9.4.18 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-4381 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 31, 2024
CSSable Countdown <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-4384 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 31, 2024
Social Pixel <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-4005 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 24, 2024
WordPress Jitsi Shortcode <= 0.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-3977 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 24, 2024
Amen <= 3.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-3992 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 24, 2024
WP Backpack <= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-4756 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 17, 2024
ARforms <= 6.5 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-4621 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 17, 2024
Flattr <= 1.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-3920 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 2, 2024
Sailthru Triggermail <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-4290 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 30, 2024
Popup4Phone <= 1.3.2 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2024-3580 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 26, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation