Have you found a vulnerability in a WordPress plugin or theme? Report vulnerabilities in WordPress plugins and themes through our bug bounty program and earn a bounty on all in-scope submissions, while we handle the responsible disclosure process on your behalf.

Wordfence Intelligence > Vulnerability Researchers > Dave Jong

Dave Jong

Organization: Patchstack

All Time Ranking

274

All Time Discoveries

90 Day Published Submissions

N/A

Last Published Submission

Is this you? Register as a researcher today to add more public profile details here!

Showing 1-20 of 274 Vulnerabilities

Seraphinite Accelerator <= 2.22.15 (2.21.13 PRO) - Authenticated (Subscriber+) Information Exposure

4.3

CVE-2024-54222

Dec 19, 2024

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

WP SuperBackup <= 2.3.3 - Missing Authorization

4.3

CVE-2024-56070

Dec 18, 2024

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

WP SuperBackup <= 2.3.3 - Reflected Cross-Site Scripting

6.1

CVE-2024-56069

Dec 18, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

WP SuperBackup <= 2.3.3 - Authenticated (Subscriber+) PHP Object Injection

8.8

CVE-2024-56068

Dec 18, 2024

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

WP SuperBackup <= 2.3.3 - Missing Authorization to Unauthenticated Back-Up File Download

7.5

CVE-2024-56067

Dec 18, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload

9.8

CVE-2024-56064

Dec 18, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Revy <= 1.18 - Unauthenticated Arbitrary File Upload

10.0

CVE-2024-54214

Dec 2, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

ARForms <= 6.4.1 - Missing Authorization to Plugin Settings Change

5.4

CVE-2024-54217

Dec 2, 2024

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

ARForms <= 6.4.1 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Read

7.7

CVE-2024-54216

Dec 2, 2024

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AIO Contact <= 2.8.1 - Missing Authorization

6.5

CVE-2024-54218

Dec 2, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AIO Contact <= 2.8.1 - Unauthenticated Stored Cross-Site Scripting

7.2

CVE-2024-54219

Dec 2, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

FAT Services Booking <= 5.6 - Unauthenticated SQL Injection

8.6

CVE-2024-54221

Dec 2, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

FAT Services Booking <= 5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting

6.4

CVE-2024-54220

Dec 2, 2024

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Revy <= 1.18 - Unauthenticated SQL Injection

7.5

CVE-2024-54215

Dec 2, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Zynith SEO <= 7.4.9 - Missing Authorization to Unauthenticated Arbitrary Option Deletion

9.1

CVE-2024-43939

Aug 26, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Zynith SEO <= 7.4.9 - Missing Authorization to Unauthenticated Settings Update

5.3

CVE-2024-43940

Aug 26, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Propovoice Pro <= 1.7.0.3 - Unauthenticated SQL Injection

10.0

CVE-2024-43941

Aug 26, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Woocommerce Addon by Greenshift< 1.9.8 - Authenticated (Subscriber+) SQL Injection

9.9

CVE-2024-43943

Aug 26, 2024

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Greenshift Query and Meta Addon < 3.9.2 - Authenticated (Subscriber+) SQL Injection

9.9

CVE-2024-43942

Aug 26, 2024

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

WP Armour Extended <= 1.26 - Cross-Site Request Forgery

4.3

CVE-2024-43947

Aug 26, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Title	CVE ID	CVSS	Vector	Date
Seraphinite Accelerator <= 2.22.15 (2.21.13 PRO) - Authenticated (Subscriber+) Information Exposure	CVE-2024-54222	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	December 19, 2024
WP SuperBackup <= 2.3.3 - Missing Authorization	CVE-2024-56070	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	December 18, 2024
WP SuperBackup <= 2.3.3 - Reflected Cross-Site Scripting	CVE-2024-56069	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	December 18, 2024
WP SuperBackup <= 2.3.3 - Authenticated (Subscriber+) PHP Object Injection	CVE-2024-56068	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	December 18, 2024
WP SuperBackup <= 2.3.3 - Missing Authorization to Unauthenticated Back-Up File Download	CVE-2024-56067	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	December 18, 2024
WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload	CVE-2024-56064	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	December 18, 2024
Revy <= 1.18 - Unauthenticated Arbitrary File Upload	CVE-2024-54214	10.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	December 2, 2024
ARForms <= 6.4.1 - Missing Authorization to Plugin Settings Change	CVE-2024-54217	5.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L	December 2, 2024
ARForms <= 6.4.1 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Read	CVE-2024-54216	7.7	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N	December 2, 2024
AIO Contact <= 2.8.1 - Missing Authorization	CVE-2024-54218	6.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L	December 2, 2024
AIO Contact <= 2.8.1 - Unauthenticated Stored Cross-Site Scripting	CVE-2024-54219	7.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N	December 2, 2024
FAT Services Booking <= 5.6 - Unauthenticated SQL Injection	CVE-2024-54221	8.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N	December 2, 2024
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting	CVE-2024-54220	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	December 2, 2024
Revy <= 1.18 - Unauthenticated SQL Injection	CVE-2024-54215	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	December 2, 2024
Zynith SEO <= 7.4.9 - Missing Authorization to Unauthenticated Arbitrary Option Deletion	CVE-2024-43939	9.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H	August 26, 2024
Zynith SEO <= 7.4.9 - Missing Authorization to Unauthenticated Settings Update	CVE-2024-43940	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	August 26, 2024
Propovoice Pro <= 1.7.0.3 - Unauthenticated SQL Injection	CVE-2024-43941	10.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	August 26, 2024
Woocommerce Addon by Greenshift< 1.9.8 - Authenticated (Subscriber+) SQL Injection	CVE-2024-43943	9.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	August 26, 2024
Greenshift Query and Meta Addon < 3.9.2 - Authenticated (Subscriber+) SQL Injection	CVE-2024-43942	9.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	August 26, 2024
WP Armour Extended <= 1.26 - Cross-Site Request Forgery	CVE-2024-43947	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	August 26, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

Dave Jong

Organization: Patchstack

Showing 1-20 of 274 Vulnerabilities

Share this researcher's vulnerability discoveries

Cookie Options

Strictly Necessary

Performance/Analytical

Targeting