Kyle Sanchez

152
All Time Ranking
20
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

20 Vulnerabilities

Title CVE ID CVSS Vector Date
WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder <= 3.6.4 - Missing Authorization to Rating Manipulation CVE-2024-34387 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N May 6, 2024
WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder <= 3.7.4 - Missing Authorization CVE-2024-34389 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N May 6, 2024
Rate My Post – Star Rating Plugin by FeedbackWP <= 3.4.4 - Insecure Direct Object Reference CVE-2024-32823 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 22, 2024
ProfileGrid <= 5.8.2 - Bypass Group Members Limit CVE-2024-32774 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 22, 2024
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference CVE-2024-32772 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 22, 2024
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference CVE-2024-32808 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N April 22, 2024
Wp Ultimate Review <= 2.2.5 - Unauthenticated Review Restriction Bypass CVE-2024-32685 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 17, 2024
Wp Ultimate Review <= 2.2.5 - Unauthenticated Insecure Direct Object Reference CVE-2024-32683 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 17, 2024
Wp Ultimate Review <= 2.2.5 - Missing Authorization CVE-2024-32684 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 17, 2024
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Insecure Direct Object Reference CVE-2024-32604 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 16, 2024
ProfileGrid <= 5.7.6 - Authenticated (Subscriber+) Insecure Direct Object Reference CVE-2024-31291 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 5, 2024
Thumbs Rating <= 5.1.0 - Unauthenticated Insecure Direct Object Reference CVE-2024-31095 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 29, 2024
VS Contact Form <= 14.7 - CAPTCHA Bypass CVE-2024-30540 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 29, 2024
weForms <= 1.6.20 - Missing Authorization CVE-2024-30512 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N March 28, 2024
CP Polls <= 1.0.71 - Unauthenticated Poll Limit Bypass CVE-2024-24873 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N February 5, 2024
CP Polls <= 1.0.71 - Unauthenticated Content Injection CVE-2024-24874 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N February 5, 2024
Custom 404 Pro <= 3.10.0 - Unauthenticated Stored Cross-Site Scripting via logging CVE-2023-51540 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N December 27, 2023
RegistrationMagic <= 5.2.5.0 - Form Submission Limit Bypass CVE-2023-51544 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 27, 2023
WP Photo Album Plus <= 8.5.02.005 - Cross-Site Scripting CVE-2023-49813 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 5, 2023
WP Photo Album Plus <= 8.5.02.005 - Insecure Direct Object Reference CVE-2023-49812 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 5, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation