Wordfence Intelligence   >   Vulnerability Researchers   >   Lenon Leite

Lenon Leite

95
All Time Ranking
34
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 21-34 of 34 Vulnerabilities

Active Directory Integration <= 1.1.8 - Authenticated (Admin+) SQL Injection
7.2
CVE ID Unknown
Sep 11, 2017
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Link Library <= 5.9.13.26 – SQL Injection
7.2
CVE ID Unknown
Aug 14, 2017
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
DSubscribers < 1.2.1 - Authenticated (Admin+) SQL Injection
7.2
CVE ID Unknown
Jul 6, 2017
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Xtreme Locator Dealer Locator Plugin <= 3.0.1 - Authenticated (Admin+) SQL Injection
7.2
CVE-2016-10939
Dec 16, 2016
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
ZM Gallery <= 1.0 - Authenticated (Admin+) SQL Injection
7.2
CVE-2016-10940
Dec 16, 2016
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
ZX_CSV Upload <= 1 - Authenticated (Admin+) SQL Injection
7.2
CVE-2016-10943
Dec 16, 2016
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Mini Cart <= 1.00.1 - Authenticated (Admin+) SQL Injection
7.2
CVE ID Unknown
Nov 11, 2016
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
FireStorm Shopping Cart eCommerce Plugin <= 2.07.02 - SQL Injection
7.2
CVE-2016-10951
Nov 10, 2016
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
BuddyPress Xprofile Custom Fields Type <= 2.6.3 - Arbitrary File Deletion
6.5
CVE ID Unknown
Jan 4, 2018
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Woocommerce CSV importer <= 3.3.6 - Arbitrary File Deletion
6.4
CVE ID Unknown
Dec 27, 2017
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
WP Private Messages <= 1.0.1 - Authenticated SQL Injection
6.3
CVE ID Unknown
Dec 16, 2016
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Ultimate Product Catalog < 4.2.3 - Authenticated SQL Injection
5.4
CVE ID Unknown
Jun 27, 2017
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
WP Vault <= 0.8.6.6 - Local File Inclusion
5.3
CVE ID Unknown
Nov 30, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Contextual Related Posts <= 2.9.3 - Cross-Site Request Forgery
4.3
CVE ID Unknown
Nov 19, 2020
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Active Directory Integration <= 1.1.8 - Authenticated (Admin+) SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H September 11, 2017
Link Library <= 5.9.13.26 – SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H August 14, 2017
DSubscribers < 1.2.1 - Authenticated (Admin+) SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 6, 2017
Xtreme Locator Dealer Locator Plugin <= 3.0.1 - Authenticated (Admin+) SQL Injection CVE-2016-10939 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 16, 2016
ZM Gallery <= 1.0 - Authenticated (Admin+) SQL Injection CVE-2016-10940 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 16, 2016
ZX_CSV Upload <= 1 - Authenticated (Admin+) SQL Injection CVE-2016-10943 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 16, 2016
Mini Cart <= 1.00.1 - Authenticated (Admin+) SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 11, 2016
FireStorm Shopping Cart eCommerce Plugin <= 2.07.02 - SQL Injection CVE-2016-10951 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 10, 2016
BuddyPress Xprofile Custom Fields Type <= 2.6.3 - Arbitrary File Deletion 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H January 4, 2018
Woocommerce CSV importer <= 3.3.6 - Arbitrary File Deletion 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L December 27, 2017
WP Private Messages <= 1.0.1 - Authenticated SQL Injection 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L December 16, 2016
Ultimate Product Catalog < 4.2.3 - Authenticated SQL Injection 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N June 27, 2017
WP Vault <= 0.8.6.6 - Local File Inclusion 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N November 30, 2016
Contextual Related Posts <= 2.9.3 - Cross-Site Request Forgery 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 19, 2020

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation