Wordfence Intelligence   >   Vulnerability Researchers   >   Norbert Hofmann

Norbert Hofmann

302
All Time Ranking
7
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

2 Achievements

Learn more about Achievements
Submitted XSS Vulnerability
Submitted XSS Vulnerability
September 4, 2024
Submitted 1 Vulnerability
Submitted 1 Vulnerability
August 7, 2024
Learn more Learn more about Achievements

7 Vulnerabilities

WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2024-6852
Aug 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Welcome Popup Update
4.3
CVE-2024-6853
Aug 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Exit Popup Update
4.3
CVE-2024-6855
Aug 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to SMTP Settings Update
4.3
CVE-2024-6856
Aug 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Organization chart <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and node_description Parameters
4.9
CVE-2024-7355
Aug 7, 2024
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Email Adding
4.3
CVE-2024-6023
Jun 21, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2024-6022
Jun 21, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Settings Update CVE-2024-6852 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 10, 2024
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Welcome Popup Update CVE-2024-6853 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 10, 2024
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Exit Popup Update CVE-2024-6855 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 10, 2024
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to SMTP Settings Update CVE-2024-6856 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 10, 2024
Organization chart <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and node_description Parameters CVE-2024-7355 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N August 7, 2024
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Email Adding CVE-2024-6023 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 21, 2024
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Settings Update CVE-2024-6022 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 21, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation