5
All Time Ranking
416
All Time Discoveries
4
90 Day Published Submissions
11 Dec '24
Last Published Submission
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
December 11, 2024
Submitted 1 Vulnerability
Submitted 1 Vulnerability
September 24, 2024

Showing 81-100 of 416 Vulnerabilities

Title CVE ID CVSS Vector Date
Risk Warning Bar <= 1.0 - Reflected Cross-Site Scripting CVE-2024-49638 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 21, 2024
Simple Custom Admin <= 1.2 - Reflected Cross-Site Scripting CVE-2024-49647 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 21, 2024
Simple Load More <= 1.0 - Reflected Cross-Site Scripting CVE-2024-49662 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 21, 2024
Affiliate Platform <= 1.4.8 - Reflected Cross-Site Scripting CVE-2024-49645 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 21, 2024
SVG Captcha <= 1.0.11 - Reflected Cross-Site Scripting CVE-2024-49648 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 21, 2024
Tida URL Screenshot <= 1.0 - Reflected Cross-Site Scripting CVE-2024-49641 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 21, 2024
Todo Custom Field <= 3.0.4 - Reflected Cross-Site Scripting CVE-2024-49642 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 21, 2024
uCAT – Next Story <= 2.0.0 - Reflected Cross-Site Scripting CVE-2024-49663 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 21, 2024
WooCommerce Maintenance Mode <= 2.0.1 - Reflected Cross-Site Scripting CVE-2024-49651 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 21, 2024
Advanced Advertising System <= 1.3.1 - Unauthenticated PHP Object Injection CVE-2024-49624 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 18, 2024
Shipyaari Shipping Management <= 1.2 - Unauthenticated PHP Object Injection CVE-2024-49626 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 18, 2024
SiteBuilder Dynamic Components <= 1.0 - Unauthenticated PHP Object Injection CVE-2024-49625 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 18, 2024
GERRYWORKS Post by Mail <= 1.0 - Contributor+ Privilege Escalation CVE-2024-49608 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 18, 2024
Giveaway Boost <= 2.1.4 - Unauthenticated PHP Object Injection CVE-2024-49332 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 17, 2024
Mitm Bug Tracker <= 1.0 - Reflected Cross-Site Scripting CVE-2024-49224 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 14, 2024
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Reflected Cross-Site Scripting CVE-2024-48032 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 9, 2024
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Cross-Site Request Forgery CVE-2024-48031 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N October 9, 2024
Restaurant Reservations Widget <= 1.0 - Reflected Cross-Site Scripting CVE-2024-48023 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 9, 2024
CartBounty – Save and recover abandoned carts for WooCommerce <= 8.2 - Cross-Site Request Forgery CVE-2024-47634 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N September 30, 2024
WP Datepicker <= 2.1.1 - Missing Authorization CVE-2024-47321 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N September 25, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation