🦸 💥 Calling all superheroes and hunters! Introducing the End of Year Holiday Extravaganza and the WordPress Superhero Challenge for the Wordfence Bug Bounty Program

Through December 9th, 2024, all in-scope vulnerability types for WordPress plugins/themes with >= 1,000 Active Installations are in-scope for ALL researchers, all plugins and themes that are hosted in the WordPress.org repository with at least 50 active installs that have been updated in the last 2 years will be in-scope for ALL researchers, the minimum bounty awarded for all in-scope submissions will be $5, and ALL researchers earn automatic bonuses of 5%-180% for valid submissions in software with 1,000 - 4,999,999 active installs, pending report limits are increased for all, and it's possible to earn up to $31,200 for high impact vulnerabilities!

Review what's in scope for your tier and updated bounties with bonuses here!

Wordfence Intelligence > Vulnerability Researchers > Jerome Bruandet

Jerome Bruandet

Organization: NinTechNet

All Time Ranking

212

All Time Discoveries

90 Day Published Submissions

N/A

Last Published Submission

Showing 121-140 of 212 Vulnerabilities

WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36745

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Menu Swapper <= 1.1.0.2 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36746

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Lightweight Sidebar Manager <= 1.1.4 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36747

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Dokan <= 3.0.8 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36748

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Easy Testimonials <= 3.6.1 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36749

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Coupon Creator <= 3.1 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36751

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36752

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Paid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36754

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

10WebAnalytics <= 1.2.8 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36756

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36757

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36758

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36759

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36761

Sep 16, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36750

Sep 6, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Quiz and Survey Master <= 7.0.1 - Arbitrary File Upload

9.8

CVE ID Unknown

Aug 29, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion

8.6

CVE-2020-36712

Aug 21, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Kali Forms <= 2.1.1 - Missing Authorization to Settings Update

7.1

CVE-2020-36720

Aug 21, 2020

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Kali Forms <= 2.1.1 - Cross-Site Request Forgery

8.8

CVE-2020-36717

Aug 21, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CMP <= 3.8.1 - Missing Authorization

8.3

CVE-2020-36730

Aug 4, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Product Input Fields for WooCommerce <= 1.2.6 - Missing Authorization

7.5

CVE-2020-36696

Aug 3, 2020

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Title	CVE ID	CVSS	Vector	Date
WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass	CVE-2020-36745	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
Menu Swapper <= 1.1.0.2 - Cross-Site Request Forgery Bypass	CVE-2020-36746	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
Lightweight Sidebar Manager <= 1.1.4 - Cross-Site Request Forgery Bypass	CVE-2020-36747	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
Dokan <= 3.0.8 - Cross-Site Request Forgery Bypass	CVE-2020-36748	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
Easy Testimonials <= 3.6.1 - Cross-Site Request Forgery Bypass	CVE-2020-36749	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
Coupon Creator <= 3.1 - Cross-Site Request Forgery Bypass	CVE-2020-36751	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery Bypass	CVE-2020-36752	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
Paid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery Bypass	CVE-2020-36754	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
10WebAnalytics <= 1.2.8 - Cross-Site Request Forgery Bypass	CVE-2020-36756	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypass	CVE-2020-36757	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass	CVE-2020-36758	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass	CVE-2020-36759	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass	CVE-2020-36761	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 16, 2020
EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass	CVE-2020-36750	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 6, 2020
Quiz and Survey Master <= 7.0.1 - Arbitrary File Upload		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	August 29, 2020
Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion	CVE-2020-36712	8.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	August 21, 2020
Kali Forms <= 2.1.1 - Missing Authorization to Settings Update	CVE-2020-36720	7.1	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N	August 21, 2020
Kali Forms <= 2.1.1 - Cross-Site Request Forgery	CVE-2020-36717	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	August 21, 2020
CMP <= 3.8.1 - Missing Authorization	CVE-2020-36730	8.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L	August 4, 2020
Product Input Fields for WooCommerce <= 1.2.6 - Missing Authorization	CVE-2020-36696	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	August 3, 2020

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation