Wordfence Intelligence   >   Vulnerability Researchers   >   Mikey Veenstra

Mikey Veenstra

225
All Time Ranking
11
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

11 Vulnerabilities

10WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change
7.2
CVE ID Unknown
Feb 27, 2020
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Async JavaScript <= 2.19.07.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE ID Unknown
Feb 27, 2020
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Profile Builder <= 3.1.0 - Privilege Escalation
9.8
CVE ID Unknown
Feb 13, 2020
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Bridge Theme <= 18.2, Qode Instagram Widget <=2.0.1, Qode Twitter Feed <= 2.0.0 - Open Redirect
7.1
CVE ID Unknown
Oct 21, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Rich Reviews <= 1.7.4 - Stored Cross-Site Scripting
7.2
CVE-2019-25216
Sep 24, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
ConvertPlug <= 3.4.2 - Unauthenticated Administrator Creation
9.8
CVE ID Unknown
May 29, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Slick Popup <= 1.7.1 - Privilege Escalation
8.8
CVE-2019-15867
May 28, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Pipdig Power Pack (P3) <= 4.7.3 - Backdoor
9.8
CVE ID Unknown
Mar 29, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP Cost Estimation < 9.660 - Upload Directory Traversal
6.5
CVE ID Unknown
Feb 14, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
WP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/Delete
9.8
CVE ID Unknown
Feb 14, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Total Donations <= 2.0.5 - Missing Authorization to Arbitrary Options Update
9.8
CVE-2019-6703
Jan 25, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
10WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N February 27, 2020
Async JavaScript <= 2.19.07.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N February 27, 2020
Profile Builder <= 3.1.0 - Privilege Escalation 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 13, 2020
Bridge Theme <= 18.2, Qode Instagram Widget <=2.0.1, Qode Twitter Feed <= 2.0.0 - Open Redirect 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L October 21, 2019
Rich Reviews <= 1.7.4 - Stored Cross-Site Scripting CVE-2019-25216 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N September 24, 2019
ConvertPlug <= 3.4.2 - Unauthenticated Administrator Creation 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 29, 2019
Slick Popup <= 1.7.1 - Privilege Escalation CVE-2019-15867 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H May 28, 2019
Pipdig Power Pack (P3) <= 4.7.3 - Backdoor 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 29, 2019
WP Cost Estimation < 9.660 - Upload Directory Traversal 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L February 14, 2019
WP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/Delete 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 14, 2019
Total Donations <= 2.0.5 - Missing Authorization to Arbitrary Options Update CVE-2019-6703 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 25, 2019

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation