Wordfence Intelligence   >   Vulnerability Researchers   >   Mallory Adams

Mallory Adams

61
All Time Ranking
56
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 41-56 of 56 Vulnerabilities

GD bbPress Attachments < 2.3 - Reflected Cross-Site Scripting
6.1
CVE-2015-5481
Jul 8, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Content Slide <= 1.4.2 - Cross-Site Scripting
6.1
CVE ID Unknown
Apr 16, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Improved User Search in Backend <= 1.2.5 - Cross-Site Request Forgery to Cross-Site Scripting
6.1
CVE-2014-5196
Aug 13, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Member Approval <= 131109 - Cross-Site Scripting
6.1
CVE-2014-3850
Jun 10, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
mTouch Quiz < 3.0.7 - Cross-Site Scripting
6.1
CVE-2014-100023
Feb 26, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Twitget <= 3.3.2 - Stored Cross-Site Scripting
5.5
CVE-2014-2995
Apr 11, 2014
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
BP Group Documents <= 1.2 - Stored Cross-Site Scripting
5.5
CVE ID Unknown
Oct 4, 2013
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
copy-me <= 1.0.0 - Missing Authorization & Cross-Site Request Forgery
5.4
CVE-2016-10938
Dec 21, 2016
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
BP Group Documents <= 1.2.1 - Path Traversal
5.4
CVE ID Unknown
Oct 4, 2013
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Rating Widget Plugin < 2.9.0 - Sensitive Information Disclosure
5.3
CVE ID Unknown
Oct 30, 2017
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Stop User Enumeration plugin <1.3.9 - User Enumeration
5.3
CVE-2017-1000226
May 16, 2017
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
WP-Ban < 1.64 - Improper Input Validation
5.3
CVE-2014-6230
Sep 17, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.0.2 - Information Disclosure
5.3
CVE-2014-5337
Jul 24, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
WatuPRO < 4.9.0.8 - Cross-Site Request Forgery
4.3
CVE-2015-9418
Sep 1, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Photo Gallery by 10Web < 1.3.43 - Authenticated Path Traversal
4.1
CVE ID Unknown
Jun 16, 2017
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
MonsterInsights - Google Analytics Dashboard for WordPress <= 5.4.4 - Authenticated Stored Cross-Site Scripting
3.8
CVE ID Unknown
Aug 10, 2015
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
GD bbPress Attachments < 2.3 - Reflected Cross-Site Scripting CVE-2015-5481 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 8, 2015
WordPress Content Slide <= 1.4.2 - Cross-Site Scripting 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 16, 2015
Improved User Search in Backend <= 1.2.5 - Cross-Site Request Forgery to Cross-Site Scripting CVE-2014-5196 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 13, 2014
Member Approval <= 131109 - Cross-Site Scripting CVE-2014-3850 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 10, 2014
mTouch Quiz < 3.0.7 - Cross-Site Scripting CVE-2014-100023 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 26, 2014
Twitget <= 3.3.2 - Stored Cross-Site Scripting CVE-2014-2995 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N April 11, 2014
BP Group Documents <= 1.2 - Stored Cross-Site Scripting 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N October 4, 2013
copy-me <= 1.0.0 - Missing Authorization & Cross-Site Request Forgery CVE-2016-10938 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N December 21, 2016
BP Group Documents <= 1.2.1 - Path Traversal 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 4, 2013
Rating Widget Plugin < 2.9.0 - Sensitive Information Disclosure 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N October 30, 2017
Stop User Enumeration plugin <1.3.9 - User Enumeration CVE-2017-1000226 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N May 16, 2017
WP-Ban < 1.64 - Improper Input Validation CVE-2014-6230 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N September 17, 2014
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.0.2 - Information Disclosure CVE-2014-5337 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 24, 2014
WatuPRO < 4.9.0.8 - Cross-Site Request Forgery CVE-2015-9418 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N September 1, 2015
Photo Gallery by 10Web < 1.3.43 - Authenticated Path Traversal 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N June 16, 2017
MonsterInsights - Google Analytics Dashboard for WordPress <= 5.4.4 - Authenticated Stored Cross-Site Scripting 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N August 10, 2015

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation