Wordfence Intelligence   >   Vulnerability Researchers   >   Dhabaleshwar Das

Dhabaleshwar Das

22
All Time Ranking
235
All Time Discoveries
8
90 Day Published Submissions
24 Mar '25
Last Published Submission

About

I fell in love with security when I realized I could hack stuff and call it a career. Now, I spend my days battling bugs, breaking apps, and convincing developers I’m actually helping. Let's keep the internet safe—or at least entertained!

2 Achievements

Learn more about Achievements
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
February 17, 2025
Submitted 1 Vulnerability
Submitted 1 Vulnerability
January 8, 2025
Learn more Learn more about Achievements

Showing 1-20 of 235 Vulnerabilities

Astra Security Suite <= 0.2 - Missing Authorization
5.3
CVE-2025-31774
Apr 1, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Apimo Connector <= 2.6.3.1 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2025-31602
Mar 31, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Appointy Appointment Scheduler <= 4.2.1 - Cross-Site Request Forgery to Settings Change
4.3
CVE-2025-31601
Mar 31, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Estatebud – Properties & Listings <= 5.5.0 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2024-13710
Mar 24, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
RateMyAgent Official <= 1.4.0 - Cross-Site Request Forgery to API Key Update
4.3
CVE-2025-0801
Feb 27, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
School Management System – SakolaWP <= 1.0.8 - Cross-Site Request Forgery to Exam Setting Manipulation
4.3
CVE-2024-13647
Feb 26, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Mortgage Lead Capture System <= 8.2.11 - Cross-Site Request Forgery to Settings Reset
4.3
CVE-2025-0796
Feb 17, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
SpeedSize Image & Video AI-Optimizer <= 1.5.1 - Cross-Site Request Forgery to Clear Cache
4.3
CVE-2024-13438
Feb 17, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Houzez Property Feed <= 2.4.21 - Cross-Site Request Forgery to Property Feed Export Deletion
4.3
CVE-2025-0808
Feb 11, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2025-22670
Feb 3, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Linear <= 2.8.1 - Cross-Site Request Forgery to Cache Reset
4.3
CVE-2024-13709
Jan 24, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Essential Real Estate <= 5.1.8 - Cross-Site Request Forgery
4.3
CVE-2025-24698
Jan 24, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Automate Hub Free by Sperse.IO <= 1.7.0 - Cross-Site Request Forgery to Activation Status Update
4.3
CVE-2024-13683
Jan 23, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
VikAppointments Services Booking Calendar <= 1.2.16 - Cross-Site Request Forgery
4.3
CVE-2025-22719
Jan 15, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.3 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2024-12605
Jan 8, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Hive Support – WordPress Help Desk <= 1.1.6 - Missing Authorization
4.3
CVE-2025-22298
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
AI WP Writer <= 3.8.4.4 - Cross-Site Request Forgery
4.3
CVE-2025-22297
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI for SEO <= 1.2.9 - Missing Authorization
5.3
CVE-2025-22299
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WP Mailster <= 1.8.17.0 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2025-22303
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
WP Visitor Statistics (Real Time Traffic) <= 7.5 - Missing Authorization
4.3
CVE-2025-22304
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Astra Security Suite <= 0.2 - Missing Authorization CVE-2025-31774 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 1, 2025
Apimo Connector <= 2.6.3.1 - Cross-Site Request Forgery to Settings Update CVE-2025-31602 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 31, 2025
Appointy Appointment Scheduler <= 4.2.1 - Cross-Site Request Forgery to Settings Change CVE-2025-31601 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 31, 2025
Estatebud – Properties & Listings <= 5.5.0 - Cross-Site Request Forgery to Settings Update CVE-2024-13710 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 24, 2025
RateMyAgent Official <= 1.4.0 - Cross-Site Request Forgery to API Key Update CVE-2025-0801 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 27, 2025
School Management System – SakolaWP <= 1.0.8 - Cross-Site Request Forgery to Exam Setting Manipulation CVE-2024-13647 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 26, 2025
Mortgage Lead Capture System <= 8.2.11 - Cross-Site Request Forgery to Settings Reset CVE-2025-0796 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 17, 2025
SpeedSize Image & Video AI-Optimizer <= 1.5.1 - Cross-Site Request Forgery to Clear Cache CVE-2024-13438 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 17, 2025
Houzez Property Feed <= 2.4.21 - Cross-Site Request Forgery to Property Feed Export Deletion CVE-2025-0808 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 11, 2025
VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Settings Update CVE-2025-22670 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 3, 2025
Linear <= 2.8.1 - Cross-Site Request Forgery to Cache Reset CVE-2024-13709 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 24, 2025
Essential Real Estate <= 5.1.8 - Cross-Site Request Forgery CVE-2025-24698 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 24, 2025
Automate Hub Free by Sperse.IO <= 1.7.0 - Cross-Site Request Forgery to Activation Status Update CVE-2024-13683 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 23, 2025
VikAppointments Services Booking Calendar <= 1.2.16 - Cross-Site Request Forgery CVE-2025-22719 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 15, 2025
AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.3 - Cross-Site Request Forgery to Settings Update CVE-2024-12605 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 8, 2025
Hive Support – WordPress Help Desk <= 1.1.6 - Missing Authorization CVE-2025-22298 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 6, 2025
AI WP Writer <= 3.8.4.4 - Cross-Site Request Forgery CVE-2025-22297 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 6, 2025
AI for SEO <= 1.2.9 - Missing Authorization CVE-2025-22299 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N January 6, 2025
WP Mailster <= 1.8.17.0 - Unauthenticated Sensitive Information Exposure CVE-2025-22303 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N January 6, 2025
WP Visitor Statistics (Real Time Traffic) <= 7.5 - Missing Authorization CVE-2025-22304 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 6, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

This site uses cookies in accordance with our Privacy Policy.