Wordfence Intelligence   >   Vulnerability Researchers   >   luc

luc

330
All Time Ranking
8
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

8 Vulnerabilities

Sequel <= 1.0.11 - Reflected Cross-Site Scripting
6.1
CVE-2025-31389
Apr 2, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Chaty Pro <= 3.3.3 - Unauthenticated Arbitrary File Upload
9.8
CVE-2025-26776
Feb 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Easy Real Estate <= 2.2.6 - Unauthenticated Privilege Escalation
9.8
CVE-2024-32555
Jan 20, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
RealHomes <= 4.3.6 - Unauthenticated Privilege Escalation
9.8
CVE-2024-32444
Jan 20, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation
9.8
CVE-2024-51888
Jan 13, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Sweet Date <= 3.7.3 - Unauthenticated Privilege Escalation
9.8
CVE-2024-43222
Dec 3, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Houzez <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation
8.8
CVE-2024-22303
Sep 17, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Houzez Login Register <= 3.2.5 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
8.8
CVE-2024-21743
Sep 17, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Sequel <= 1.0.11 - Reflected Cross-Site Scripting CVE-2025-31389 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 2, 2025
Chaty Pro <= 3.3.3 - Unauthenticated Arbitrary File Upload CVE-2025-26776 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 14, 2025
Easy Real Estate <= 2.2.6 - Unauthenticated Privilege Escalation CVE-2024-32555 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 20, 2025
RealHomes <= 4.3.6 - Unauthenticated Privilege Escalation CVE-2024-32444 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 20, 2025
Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation CVE-2024-51888 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 13, 2025
Sweet Date <= 3.7.3 - Unauthenticated Privilege Escalation CVE-2024-43222 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 3, 2024
Houzez <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation CVE-2024-22303 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H September 17, 2024
Houzez Login Register <= 3.2.5 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover CVE-2024-21743 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H September 17, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

This site uses cookies in accordance with our Privacy Policy.