Wordfence Intelligence   >   Vulnerability Researchers   >   Hassan Khan Yusufzai - Splint3r7

Hassan Khan Yusufzai - Splint3r7

48
All Time Ranking
98
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 61-80 of 98 Vulnerabilities

A5 Custom Login Page <= 2.8.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13226
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ECT Home Page Products <= 1.9 - Reflected Cross-Site Scripting
6.1
CVE-2024-13225
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
SlideDeck 1 Lite Content Slider <= 1.4.8 - Reflected Cross-Site Scripting
6.1
CVE-2024-13224
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Tabulate <= 2.10.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-13223
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Fast Tube <= 2.3.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13218
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Policy Genius <= 2.0.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-13219
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Fantastic Elasticsearch <= 4.1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13221
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Google Map Professional <= 1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13220
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Email Newsletter <= 1.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13098
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Widget4Call <= 1.0.7 - Reflected Cross-Site Scripting
6.1
CVE-2024-13099
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Finance <= 1.3.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-13097
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
OPSI Israel Domestic Shipments <= 2.6.5 - Reflected Cross-Site Scripting
6.1
CVE-2024-13100
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Clasify Classified Listing <= 1.0.7 - Reflected Cross-Site Scripting
6.1
CVE-2024-12725
Jan 9, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Bulk Me Now! <= 2.0 - Reflected Cross-Site Scripting via 'status'
6.1
CVE-2024-12638
Jan 9, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Competition Form <= 2.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-12749
Jan 7, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Custom Field Manager <= 1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-12873
Jan 7, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Dental Optimizer Patient Generator App <= 1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13052
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Triggers Lite <= 2.5.3 - Reflected Cross-Site Scripting
5.4
CVE-2024-13094
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Dyn Business Panel <= 1.0.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13055
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WC Affiliate <= 2.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-12321
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
A5 Custom Login Page <= 2.8.1 - Reflected Cross-Site Scripting CVE-2024-13226 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
ECT Home Page Products <= 1.9 - Reflected Cross-Site Scripting CVE-2024-13225 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
SlideDeck 1 Lite Content Slider <= 1.4.8 - Reflected Cross-Site Scripting CVE-2024-13224 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Tabulate <= 2.10.3 - Reflected Cross-Site Scripting CVE-2024-13223 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Fast Tube <= 2.3.1 - Reflected Cross-Site Scripting CVE-2024-13218 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Policy Genius <= 2.0.4 - Reflected Cross-Site Scripting CVE-2024-13219 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Fantastic Elasticsearch <= 4.1.0 - Reflected Cross-Site Scripting CVE-2024-13221 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Google Map Professional <= 1.0 - Reflected Cross-Site Scripting CVE-2024-13220 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
WP Email Newsletter <= 1.1 - Reflected Cross-Site Scripting CVE-2024-13098 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Widget4Call <= 1.0.7 - Reflected Cross-Site Scripting CVE-2024-13099 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
WP Finance <= 1.3.6 - Reflected Cross-Site Scripting CVE-2024-13097 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
OPSI Israel Domestic Shipments <= 2.6.5 - Reflected Cross-Site Scripting CVE-2024-13100 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Clasify Classified Listing <= 1.0.7 - Reflected Cross-Site Scripting CVE-2024-12725 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 9, 2025
Bulk Me Now! <= 2.0 - Reflected Cross-Site Scripting via 'status' CVE-2024-12638 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 9, 2025
Competition Form <= 2.0 - Reflected Cross-Site Scripting CVE-2024-12749 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 7, 2025
Custom Field Manager <= 1.0 - Reflected Cross-Site Scripting CVE-2024-12873 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 7, 2025
Dental Optimizer Patient Generator App <= 1.0 - Reflected Cross-Site Scripting CVE-2024-13052 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
WP Triggers Lite <= 2.5.3 - Reflected Cross-Site Scripting CVE-2024-13094 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N January 6, 2025
Dyn Business Panel <= 1.0.0 - Reflected Cross-Site Scripting CVE-2024-13055 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
WC Affiliate <= 2.3 - Reflected Cross-Site Scripting CVE-2024-12321 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

This site uses cookies in accordance with our Privacy Policy.