Wordfence Intelligence   >   Vulnerability Researchers   >   Hassan Khan Yusufzai - Splint3r7

Hassan Khan Yusufzai - Splint3r7

48
All Time Ranking
98
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 21-40 of 98 Vulnerabilities

Email Keep <= 1.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13825
Feb 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-13868
Feb 13, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-12737
Feb 5, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
pushBIZ – Push Notification <= 1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13629
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Spiritual Gifts Survey <= 0.9.10 - Reflected Cross-Site Scripting
6.1
CVE-2025-0688
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Spiritual Gifts Survey <= 0.9.10 - Reflected Cross-Site Scripting
6.1
CVE-2025-0687
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CalendApp <= 1.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13669
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Pricing Table <= 1.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13628
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Extra Fields <= 1.0.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13632
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Activity-o-meter <= 1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13668
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
R3W InstaFeed <= 1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13678
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Post Sync <= 1.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13634
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WPMovieLibrary <= 2.1.4.8 - Reflected Cross-Site Scripting
6.1
CVE-2024-13624
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Custom Block Builder – Lazy Blocks <= 3.8.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-12878
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Simple catalogue <= 1.0.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-13633
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Om Stripe <= 02.00.00 - Reflected Cross-Site Scripting
6.1
CVE-2024-13631
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NewsTicker <= 1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13630
Feb 4, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Total Contest Lite <= 2.8.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13822
Feb 3, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
VR Frases <= 3.0.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13626
Jan 27, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Touch Slider <= 2.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-13627
Jan 27, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Email Keep <= 1.1 - Reflected Cross-Site Scripting CVE-2024-13825 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 14, 2025
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Reflected Cross-Site Scripting CVE-2024-13868 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 13, 2025
WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Reflected Cross-Site Scripting CVE-2024-12737 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 5, 2025
pushBIZ – Push Notification <= 1.0 - Reflected Cross-Site Scripting CVE-2024-13629 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
Spiritual Gifts Survey <= 0.9.10 - Reflected Cross-Site Scripting CVE-2025-0688 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
Spiritual Gifts Survey <= 0.9.10 - Reflected Cross-Site Scripting CVE-2025-0687 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
CalendApp <= 1.1 - Reflected Cross-Site Scripting CVE-2024-13669 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
WP Pricing Table <= 1.1 - Reflected Cross-Site Scripting CVE-2024-13628 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
WP Extra Fields <= 1.0.1 - Reflected Cross-Site Scripting CVE-2024-13632 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
WordPress Activity-o-meter <= 1 - Reflected Cross-Site Scripting CVE-2024-13668 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
R3W InstaFeed <= 1.0 - Reflected Cross-Site Scripting CVE-2024-13678 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
Post Sync <= 1.1 - Reflected Cross-Site Scripting CVE-2024-13634 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
WPMovieLibrary <= 2.1.4.8 - Reflected Cross-Site Scripting CVE-2024-13624 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
Custom Block Builder – Lazy Blocks <= 3.8.2 - Reflected Cross-Site Scripting CVE-2024-12878 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
Simple catalogue <= 1.0.2 - Reflected Cross-Site Scripting CVE-2024-13633 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
Om Stripe <= 02.00.00 - Reflected Cross-Site Scripting CVE-2024-13631 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
NewsTicker <= 1.0 - Reflected Cross-Site Scripting CVE-2024-13630 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 4, 2025
Total Contest Lite <= 2.8.1 - Reflected Cross-Site Scripting CVE-2024-13822 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 3, 2025
VR Frases <= 3.0.1 - Reflected Cross-Site Scripting CVE-2024-13626 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 27, 2025
WP Touch Slider <= 2.2 - Reflected Cross-Site Scripting CVE-2024-13627 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 27, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

This site uses cookies in accordance with our Privacy Policy.