Wordfence Intelligence   >   Vulnerability Researchers   >   Majed Refaea

Majed Refaea

36
All Time Ranking
100
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 61-80 of 100 Vulnerabilities

Meks Video Importer <= 1.0.11 - Missing Authorization
4.3
CVE-2024-38733
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WP GoToWebinar <= 15.6 - Missing Authorization
4.3
CVE-2024-38695
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WP Fast Total Search <= 1.68.232 - Missing Authorization
4.3
CVE-2024-38714
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
MakeStories (for Google Web Stories) <= 3.0.3 - Authenticated (Subscriber+) Arbitrary File Download and Server-Side Request Forgery
4.3
CVE-2024-38746
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Metorik – Reports & Email Automation for WooCommerce <= 1.7.1 - Cross-Site Request Forgery
4.3
CVE-2024-38691
Jul 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Ultimate Auction <= 4.2.5 - Cross-Site Request Forgery
4.3
CVE-2024-37543
Jul 6, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WPAdverts – Classifieds Plugin <= 2.1.2 - Cross-Site Request Forgery
4.3
CVE-2024-37238
Jun 21, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
MasterStudy LMS <= 3.2.1 - Cross-Site Request Forgery
4.3
CVE-2024-37093
Jun 20, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
User Rights Access Manager <= 1.1.2 - Missing Authorization
4.3
CVE-2024-37209
Jun 20, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Copymatic – AI Content Writer & Generator <= 1.9 - Missing Authorization
4.3
CVE-2024-35716
Jun 6, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) <= 5.2.3 - Cross-Site Request Forgery
4.3
CVE-2024-35689
Jun 6, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Fastly <= 1.2.25 - Missing Authorization
4.3
CVE-2024-34803
May 20, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WordPress Webinar Plugin – WebinarPress <= 1.33.20 - Cross-Site Request Forgery
4.3
CVE-2024-34818
May 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Social Sharing Plugin – Social Warfare <= 4.4.5.1 - Cross-Site Request Forgery
4.3
CVE-2024-34825
May 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WPPizza <= 3.18.10 - Missing Authorization
4.3
CVE-2024-33576
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Headline Analyzer <= 1.3.3 - Cross-Site Request Forgery
4.3
CVE-2024-32806
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Podlove Podcast Publisher <= 4.0.11 - Authenticated (Contributor+) Server-Side Request Forgery
4.3
CVE-2024-32812
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
SchedulePress <= 5.0.8 - Missing Authorization
4.3
CVE-2024-32717
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WPCal.io – Easy Meeting Scheduler <= 0.9.5.8 - Cross-Site Request Forgery
4.3
CVE-2024-32795
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Libsyn Publisher Hub <= 1.4.4 - Cross-Site Request Forgery
4.3
CVE-2024-32141
Apr 12, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Meks Video Importer <= 1.0.11 - Missing Authorization CVE-2024-38733 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N July 11, 2024
WP GoToWebinar <= 15.6 - Missing Authorization CVE-2024-38695 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N July 11, 2024
WP Fast Total Search <= 1.68.232 - Missing Authorization CVE-2024-38714 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N July 11, 2024
MakeStories (for Google Web Stories) <= 3.0.3 - Authenticated (Subscriber+) Arbitrary File Download and Server-Side Request Forgery CVE-2024-38746 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N July 11, 2024
Metorik – Reports & Email Automation for WooCommerce <= 1.7.1 - Cross-Site Request Forgery CVE-2024-38691 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 10, 2024
Ultimate Auction <= 4.2.5 - Cross-Site Request Forgery CVE-2024-37543 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 6, 2024
WPAdverts – Classifieds Plugin <= 2.1.2 - Cross-Site Request Forgery CVE-2024-37238 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 21, 2024
MasterStudy LMS <= 3.2.1 - Cross-Site Request Forgery CVE-2024-37093 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 20, 2024
User Rights Access Manager <= 1.1.2 - Missing Authorization CVE-2024-37209 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 20, 2024
Copymatic – AI Content Writer & Generator <= 1.9 - Missing Authorization CVE-2024-35716 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 6, 2024
Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) <= 5.2.3 - Cross-Site Request Forgery CVE-2024-35689 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 6, 2024
Fastly <= 1.2.25 - Missing Authorization CVE-2024-34803 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N May 20, 2024
WordPress Webinar Plugin – WebinarPress <= 1.33.20 - Cross-Site Request Forgery CVE-2024-34818 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N May 9, 2024
Social Sharing Plugin – Social Warfare <= 4.4.5.1 - Cross-Site Request Forgery CVE-2024-34825 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N May 9, 2024
WPPizza <= 3.18.10 - Missing Authorization CVE-2024-33576 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 25, 2024
Headline Analyzer <= 1.3.3 - Cross-Site Request Forgery CVE-2024-32806 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 22, 2024
Podlove Podcast Publisher <= 4.0.11 - Authenticated (Contributor+) Server-Side Request Forgery CVE-2024-32812 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 22, 2024
SchedulePress <= 5.0.8 - Missing Authorization CVE-2024-32717 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 22, 2024
WPCal.io – Easy Meeting Scheduler <= 0.9.5.8 - Cross-Site Request Forgery CVE-2024-32795 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 22, 2024
Libsyn Publisher Hub <= 1.4.4 - Cross-Site Request Forgery CVE-2024-32141 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 12, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation