💥 Time to wrap up this year and kick-off the new year with a bang! We’re wrapping up the year with our End of Year Holiday Extravaganza, High-Risk Bonus Blitz Challenge, and Superhero Challenge for the Wordfence Bug Bounty Program.

Through January 6th, 2025, our program has an expanded scope for all researchers with a new lower active install count threshold, automatic bonuses for in-scope submissions, an extra bonus for those focusing on high-risk vulnerabilities, a minimum bounty for all submissions, increased pending report limits, and our rewards remain as high as $31,200.

Review what's in scope for your tier and updated bounties with bonuses here!

Wordfence Intelligence > Vulnerability Researchers > Mika

Mika

All Time Ranking

416

All Time Discoveries

90 Day Published Submissions

11 Dec '24

Last Published Submission

2 Achievements

Learn more about Achievements

Learn more Learn more about Achievements

Showing 381-400 of 416 Vulnerabilities

Hover Image <= 1.4.1 - Cross-Site Request Forgery

8.8

CVE-2022-47611

Jan 13, 2023

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

WP Better Emails <= 0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

5.5

CVE-2023-22679

Jan 13, 2023

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

DNUI <= 2.8.1 - Cross-Site Request Forgery leading to Unused Image Deletion and Database Image Access

5.4

CVE-2022-47609

Jan 13, 2023

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

WP Pipes <= 1.33 - Authenticated (Admin+) SQL Injection

9.8

CVE-2022-45355

Dec 20, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Product Reviews Import Export for WooCommerce <= 1.4.8 - CSV Injection

4.8

CVE-2022-46802

Dec 9, 2022

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Custom Content by Country <= 3.1.2 - Cross-Site Request Forgery

8.8

CVE-2022-41650

Dec 5, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Export Users Data CSV <= 2.1 - Authenticated (Subscriber+) CSV Injection

6.0

CVE-2022-41616

Nov 30, 2022

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Export Users With Meta <= 0.6.8 - CSV Injection

8.0

CVE-2022-44577

Nov 17, 2022

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

News Announcement Scroll <= 8.8.8 - Authenticated (Admininstrator+) Stored Cross-Site Scripting

5.5

CVE-2022-40694

Nov 17, 2022

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

ProfileGrid <= 5.1.7 - Authenticated (Subscriber+) CSV Injection

6.3

CVE-2022-41791

Nov 17, 2022

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

User Blocker <= 1.5.5 - Authenticated (Admin+) CSV Injection

5.9

CVE-2022-45078

Nov 9, 2022

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Homepage Popup <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting

5.5

CVE-2022-43480

Nov 1, 2022

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Homepage PopUp <= 1.2.5 - Cross-Site Request Forgery

8.8

CVE-2022-44585

Nov 1, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

IP Blacklist Cloud <= 5.00 - Authenticated (Administrator+) SQL Injection

7.2

CVE-2022-43462

Oct 24, 2022

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

IP Blacklist Cloud <= 5.00 - Authenticated (Administrator+) Stored Cross-Site Scripting

5.5

CVE-2022-42462

Oct 24, 2022

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Simple SEO <= 1.8.12 - Cross-Site Request Forgery to Sitemap Deletion/Creation

8.8

CVE-2022-36404

Oct 20, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Mantenimiento web <= 0.13 - Authenticated (Administrator+) Stored Cross-Site Scripting

5.5

CVE-2022-41980

Oct 20, 2022

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Simple SEO <= 1.8.12 - Cross-Site Request Forgery

8.8

CVE-2022-44627

Oct 20, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Page View Count <= 2.5.5 - Cross-Site Request Forgery

8.8

CVE-2022-40131

Oct 13, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Rock Convert <= 2.11.0 - Authenticated (Admin+) Stored Cross-Site Scripting

5.5

CVE-2022-36428

Oct 4, 2022

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Title	CVE ID	CVSS	Vector	Date
Hover Image <= 1.4.1 - Cross-Site Request Forgery	CVE-2022-47611	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	January 13, 2023
WP Better Emails <= 0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-22679	5.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N	January 13, 2023
DNUI <= 2.8.1 - Cross-Site Request Forgery leading to Unused Image Deletion and Database Image Access	CVE-2022-47609	5.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L	January 13, 2023
WP Pipes <= 1.33 - Authenticated (Admin+) SQL Injection	CVE-2022-45355	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	December 20, 2022
Product Reviews Import Export for WooCommerce <= 1.4.8 - CSV Injection	CVE-2022-46802	4.8	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N	December 9, 2022
Custom Content by Country <= 3.1.2 - Cross-Site Request Forgery	CVE-2022-41650	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	December 5, 2022
Export Users Data CSV <= 2.1 - Authenticated (Subscriber+) CSV Injection	CVE-2022-41616	6.0	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L	November 30, 2022
Export Users With Meta <= 0.6.8 - CSV Injection	CVE-2022-44577	8.0	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H	November 17, 2022
News Announcement Scroll <= 8.8.8 - Authenticated (Admininstrator+) Stored Cross-Site Scripting	CVE-2022-40694	5.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N	November 17, 2022
ProfileGrid <= 5.1.7 - Authenticated (Subscriber+) CSV Injection	CVE-2022-41791	6.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L	November 17, 2022
User Blocker <= 1.5.5 - Authenticated (Admin+) CSV Injection	CVE-2022-45078	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L	November 9, 2022
Homepage Popup <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2022-43480	5.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N	November 1, 2022
Homepage PopUp <= 1.2.5 - Cross-Site Request Forgery	CVE-2022-44585	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	November 1, 2022
IP Blacklist Cloud <= 5.00 - Authenticated (Administrator+) SQL Injection	CVE-2022-43462	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	October 24, 2022
IP Blacklist Cloud <= 5.00 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2022-42462	5.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N	October 24, 2022
Simple SEO <= 1.8.12 - Cross-Site Request Forgery to Sitemap Deletion/Creation	CVE-2022-36404	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	October 20, 2022
Mantenimiento web <= 0.13 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2022-41980	5.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N	October 20, 2022
Simple SEO <= 1.8.12 - Cross-Site Request Forgery	CVE-2022-44627	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	October 20, 2022
Page View Count <= 2.5.5 - Cross-Site Request Forgery	CVE-2022-40131	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	October 13, 2022
Rock Convert <= 2.11.0 - Authenticated (Admin+) Stored Cross-Site Scripting	CVE-2022-36428	5.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N	October 4, 2022

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation