Wordfence Intelligence   >   Vulnerability Researchers   >   Joshua Chan

Joshua Chan

29
All Time Ranking
168
All Time Discoveries
0
90 Day Published Submissions
6 Jan '25
Last Published Submission

About

Penetration Tester, Security Researcher

2 Achievements

Learn more about Achievements
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
January 6, 2025
Submitted 1 Vulnerability
Submitted 1 Vulnerability
October 9, 2024
Learn more Learn more about Achievements

Showing 61-80 of 168 Vulnerabilities

Coming Soon <= 1.6.3 - Unauthenticated Information Exposure
5.3
CVE-2024-38756
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Wallet System for WooCommerce <= 2.5.13 - Information Exposure via Log Files
5.3
CVE-2024-38699
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
HitPay Payment Gateway for WooCommerce <= 4.1.3 - Information Exposure via Log Files
5.3
CVE-2024-38747
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
affiliate-toolkit <= 3.4.4 - Unauthenticated Sensitive Information Exposure via Logs
5.3
CVE-2024-37205
Jun 20, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Contact Form Builder, Contact Widget <= 2.1.7 - Authentication Request Bypass
5.3
CVE-2024-35747
Jun 6, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WP EasyCart <= 5.5.19 - Missing Authorization
5.3
CVE-2024-35667
Jun 3, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Ghost <= 1.4.0 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2024-34559
May 7, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Dynamics 365 Integration <= 1.3.17 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2024-34550
May 7, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Media Cleaner: Clean your WordPress! <= 6.7.2 - Unauthenticated Information Exposure
5.3
CVE-2024-33922
Apr 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Assistant – Every Day Productivity Apps <= 1.4.9.1 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2024-33538
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Easy Accept Payments <= 4.9.10 - Missing Authorization
5.3
CVE-2024-33591
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Leaky Paywall <= 4.20.8 - Missing Authorization to Price Manipulation
5.3
CVE-2024-33594
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WP Time Slots Booking Form <= 1.2.06 - Unauthenticated Price Manipulation
5.3
CVE-2024-33543
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
BizPrint <= 4.3.39 - Missing Authorization via showTemplatePreview()
5.3
CVE-2024-32777
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
USPS Shipping for WooCommerce – Live Rates <= 1.9.4 - Sensitive Information Exposure
5.3
CVE-2024-32811
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Subscribe To Comments Reloaded <= 220725 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2024-31249
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Contact Form Email <= 1.3.44 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2024-31302
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
SearchIQ <= 4.5 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2024-31259
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EventPrime <= 3.3.4 - Missing Authorization to Booking Price Maniputlation
5.3
CVE-2024-31275
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
ConvertKit <= 2.4.5 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2024-31245
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Title CVE ID CVSS Vector Date
Coming Soon <= 1.6.3 - Unauthenticated Information Exposure CVE-2024-38756 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 11, 2024
Wallet System for WooCommerce <= 2.5.13 - Information Exposure via Log Files CVE-2024-38699 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 11, 2024
HitPay Payment Gateway for WooCommerce <= 4.1.3 - Information Exposure via Log Files CVE-2024-38747 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 11, 2024
affiliate-toolkit <= 3.4.4 - Unauthenticated Sensitive Information Exposure via Logs CVE-2024-37205 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N June 20, 2024
Contact Form Builder, Contact Widget <= 2.1.7 - Authentication Request Bypass CVE-2024-35747 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N June 6, 2024
WP EasyCart <= 5.5.19 - Missing Authorization CVE-2024-35667 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N June 3, 2024
Ghost <= 1.4.0 - Unauthenticated Sensitive Information Exposure CVE-2024-34559 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N May 7, 2024
Dynamics 365 Integration <= 1.3.17 - Unauthenticated Sensitive Information Exposure CVE-2024-34550 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N May 7, 2024
Media Cleaner: Clean your WordPress! <= 6.7.2 - Unauthenticated Information Exposure CVE-2024-33922 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 29, 2024
Assistant – Every Day Productivity Apps <= 1.4.9.1 - Unauthenticated Sensitive Information Exposure CVE-2024-33538 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 25, 2024
Easy Accept Payments <= 4.9.10 - Missing Authorization CVE-2024-33591 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 25, 2024
Leaky Paywall <= 4.20.8 - Missing Authorization to Price Manipulation CVE-2024-33594 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 25, 2024
WP Time Slots Booking Form <= 1.2.06 - Unauthenticated Price Manipulation CVE-2024-33543 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 25, 2024
BizPrint <= 4.3.39 - Missing Authorization via showTemplatePreview() CVE-2024-32777 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 22, 2024
USPS Shipping for WooCommerce – Live Rates <= 1.9.4 - Sensitive Information Exposure CVE-2024-32811 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 22, 2024
Subscribe To Comments Reloaded <= 220725 - Unauthenticated Sensitive Information Exposure CVE-2024-31249 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 5, 2024
Contact Form Email <= 1.3.44 - Unauthenticated Sensitive Information Exposure CVE-2024-31302 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 5, 2024
SearchIQ <= 4.5 - Unauthenticated Sensitive Information Exposure CVE-2024-31259 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 5, 2024
EventPrime <= 3.3.4 - Missing Authorization to Booking Price Maniputlation CVE-2024-31275 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 5, 2024
ConvertKit <= 2.4.5 - Unauthenticated Sensitive Information Exposure CVE-2024-31245 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 5, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

This site uses cookies in accordance with our Privacy Policy.