Wordfence Intelligence   >   Vulnerability Researchers   >   Prajal Kulkarni

Prajal Kulkarni

44
All Time Ranking
88
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 1-20 of 88 Vulnerabilities

Youtube Freedown <= 1.0 - Remote Media File Inclusion
9.8
CVE ID Unknown
May 25, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Podcasting Plugin by TSG < 3.0.5 - Remote File Inclusion
9.8
CVE ID Unknown
May 25, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
µAudio Player <= 0.6.2 - Remote File Inclusion
9.8
CVE ID Unknown
May 25, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP-lightpop <= 0.8.5.6 - Remote Media File Inclusion
9.8
CVE ID Unknown
May 25, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
pb-embedFlash <= 1.5.1 - Remote File Inclusion
9.8
CVE ID Unknown
May 25, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jRSS Widget <= 1.2 - Server-Side Request Forgery
7.5
CVE-2014-9292
May 28, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Anyfont <= 2.2.3 - Cross-Site Scripting
7.2
CVE-2014-4515
Jul 2, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Malware Finder <= 1.1 - Cross-Site Scripting
7.1
CVE-2014-4538
May 28, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Oleggo LiveStream <= 0.2.6 - Cross-Site Scripting
7.1
CVE-2014-4540
May 28, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
GEO Redirector <= 1.0.1 - Cross-Site Scripting
7.1
CVE-2014-4533
May 25, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
WooCommerce SagePay Direct Payment Gateway < 0.1.6.7 - Cross-Site Scripting
7.1
CVE-2014-4549
May 25, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Toolpage <= 1.6.1 - Cross-Site Scripting
7.1
CVE-2014-4560
May 25, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Game Tabs <= 0.4.0 - Cross-Site Scripting
7.1
CVE-2014-4531
Apr 25, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Shortcode Ninja <= 1.4 - Cross-Site Scripting
6.4
CVE-2014-4550
May 25, 2014
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Hot Files: File Sharing and Download Manager Plugin <= 1.0.0 - Cross-Site scripting
6.1
CVE-2014-4588
Aug 1, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Silverlight Media Player <= 0.8 - Cross-Site Scripting
6.1
CVE-2014-4589
Aug 1, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Snap App <= 1.5 - Cross-Site Scripting
6.1
CVE-2014-4596
Jul 7, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Your Text Manager <= 0.3.0 - Cross-Site Scripting
6.1
CVE-2014-4604
May 28, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
SwipeHQ Payment Gateway WooCommerce <= 2.7.1 - Reflected Cross-Site Scripting
6.1
CVE-2014-4558
May 28, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Jigoshop Swipe plugin <= 3.1.0 - Cross-Site Scripting
6.1
CVE-2014-4557
May 28, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Youtube Freedown <= 1.0 - Remote Media File Inclusion 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 25, 2014
Podcasting Plugin by TSG < 3.0.5 - Remote File Inclusion 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 25, 2014
µAudio Player <= 0.6.2 - Remote File Inclusion 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 25, 2014
WP-lightpop <= 0.8.5.6 - Remote Media File Inclusion 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 25, 2014
pb-embedFlash <= 1.5.1 - Remote File Inclusion 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 25, 2014
jRSS Widget <= 1.2 - Server-Side Request Forgery CVE-2014-9292 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N May 28, 2014
Anyfont <= 2.2.3 - Cross-Site Scripting CVE-2014-4515 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N July 2, 2014
Malware Finder <= 1.1 - Cross-Site Scripting CVE-2014-4538 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L May 28, 2014
Oleggo LiveStream <= 0.2.6 - Cross-Site Scripting CVE-2014-4540 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L May 28, 2014
GEO Redirector <= 1.0.1 - Cross-Site Scripting CVE-2014-4533 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L May 25, 2014
WooCommerce SagePay Direct Payment Gateway < 0.1.6.7 - Cross-Site Scripting CVE-2014-4549 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L May 25, 2014
Toolpage <= 1.6.1 - Cross-Site Scripting CVE-2014-4560 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L May 25, 2014
Game Tabs <= 0.4.0 - Cross-Site Scripting CVE-2014-4531 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L April 25, 2014
Shortcode Ninja <= 1.4 - Cross-Site Scripting CVE-2014-4550 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N May 25, 2014
Hot Files: File Sharing and Download Manager Plugin <= 1.0.0 - Cross-Site scripting CVE-2014-4588 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 1, 2014
WP Silverlight Media Player <= 0.8 - Cross-Site Scripting CVE-2014-4589 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 1, 2014
WP Snap App <= 1.5 - Cross-Site Scripting CVE-2014-4596 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 7, 2014
Your Text Manager <= 0.3.0 - Cross-Site Scripting CVE-2014-4604 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 28, 2014
SwipeHQ Payment Gateway WooCommerce <= 2.7.1 - Reflected Cross-Site Scripting CVE-2014-4558 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 28, 2014
Jigoshop Swipe plugin <= 3.1.0 - Cross-Site Scripting CVE-2014-4557 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 28, 2014

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation