Wordfence Intelligence   >   Vulnerability Researchers   >   Hassan Khan Yusufzai - Splint3r7

Hassan Khan Yusufzai - Splint3r7

48
All Time Ranking
98
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 41-60 of 98 Vulnerabilities

Tube Video Ads Lite <= 1.5.7 - Reflected Cross-Site Scripting
6.1
CVE-2024-13625
Jan 27, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Chalet-Montagne.com Tools <= 2.7.8 - Reflected Cross-Site Scripting
6.1
CVE-2024-12586
Jan 23, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Zarinpal Paid Downloads <= 2.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-13543
Jan 21, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Stray Random Quotes <= 1.9.9 - Reflected Cross-Site Scripting
6.1
CVE-2024-13570
Jan 21, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Legull <= 1.2.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-13352
Jan 17, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Guten Free Options <= 0.9.5 - Reflected Cross-Site Scripting
6.1
CVE-2024-13492
Jan 17, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Projects Portfolio with Client Testimonials <= 3.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13114
Jan 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Solidres <= 0.9.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-13329
Jan 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Giga Messenger – Express <= 2.3.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13328
Jan 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Musicbox <= 2.0.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-13327
Jan 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13326
Jan 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Glossy <= 2.3.5 - Reflected Cross-Site Scripting
6.1
CVE-2024-13325
Jan 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
JustRows free <= 0.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-13330
Jan 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Dream Carousel <= 1.0.1b - Reflected Cross-Site Scripting
6.1
CVE-2024-13331
Jan 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
TransFinanz <= 1.0.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13332
Jan 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Banner Garden Plugin for WordPress <= 0.1.3 - Reflected Cross-Site Scripting
6.1
CVE-2025-0368
Jan 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Essential WP Real Estate <= 1.1.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-13347
Jan 13, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
User Messages <= 1.2.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-13222
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CanvasFlow <= 1.5.5 - Reflected Cross-Site Scripting
6.1
CVE-2024-12275
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP MediaTagger <= 4.1.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13112
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Tube Video Ads Lite <= 1.5.7 - Reflected Cross-Site Scripting CVE-2024-13625 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 27, 2025
Chalet-Montagne.com Tools <= 2.7.8 - Reflected Cross-Site Scripting CVE-2024-12586 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 23, 2025
Zarinpal Paid Downloads <= 2.3 - Reflected Cross-Site Scripting CVE-2024-13543 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 21, 2025
Stray Random Quotes <= 1.9.9 - Reflected Cross-Site Scripting CVE-2024-13570 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 21, 2025
Legull <= 1.2.2 - Reflected Cross-Site Scripting CVE-2024-13352 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 17, 2025
Guten Free Options <= 0.9.5 - Reflected Cross-Site Scripting CVE-2024-13492 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 17, 2025
WP Projects Portfolio with Client Testimonials <= 3.0 - Reflected Cross-Site Scripting CVE-2024-13114 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 14, 2025
Solidres <= 0.9.4 - Reflected Cross-Site Scripting CVE-2024-13329 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 14, 2025
Giga Messenger – Express <= 2.3.1 - Reflected Cross-Site Scripting CVE-2024-13328 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 14, 2025
Musicbox <= 2.0.3 - Reflected Cross-Site Scripting CVE-2024-13327 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 14, 2025
iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting CVE-2024-13326 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 14, 2025
Glossy <= 2.3.5 - Reflected Cross-Site Scripting CVE-2024-13325 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 14, 2025
JustRows free <= 0.2 - Reflected Cross-Site Scripting CVE-2024-13330 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 14, 2025
WP Dream Carousel <= 1.0.1b - Reflected Cross-Site Scripting CVE-2024-13331 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 14, 2025
TransFinanz <= 1.0.0 - Reflected Cross-Site Scripting CVE-2024-13332 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 14, 2025
Banner Garden Plugin for WordPress <= 0.1.3 - Reflected Cross-Site Scripting CVE-2025-0368 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 14, 2025
Essential WP Real Estate <= 1.1.3 - Reflected Cross-Site Scripting CVE-2024-13347 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 13, 2025
User Messages <= 1.2.4 - Reflected Cross-Site Scripting CVE-2024-13222 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
CanvasFlow <= 1.5.5 - Reflected Cross-Site Scripting CVE-2024-12275 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
WP MediaTagger <= 4.1.1 - Reflected Cross-Site Scripting CVE-2024-13112 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

This site uses cookies in accordance with our Privacy Policy.