Wordfence Intelligence   >   Vulnerability Researchers   >   stealthcopter

stealthcopter

6
All Time Ranking
400
All Time Discoveries
16
90 Day Published Submissions
11 Dec '24
Last Published Submission

10 Achievements

Learn more about Achievements
Submitted 200 Vulnerabilities
Submitted 200 Vulnerabilities
October 16, 2024
Submitted XSS Vulnerability
Submitted XSS Vulnerability
September 4, 2024
Submitted 100 Vulnerabilities
Submitted 100 Vulnerabilities
June 5, 2024
Submitted 75 Vulnerabilities
Submitted 75 Vulnerabilities
May 21, 2024
Submitted 50 Vulnerabilities
Submitted 50 Vulnerabilities
May 9, 2024
Submitted 25 Vulnerabilities
Submitted 25 Vulnerabilities
April 19, 2024
1337 Vulnerability Researcher
1337 Vulnerability Researcher
April 18, 2024
Submitted 10 Vulnerabilities
Submitted 10 Vulnerabilities
March 8, 2024
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
February 20, 2024
Submitted 1 Vulnerability
Submitted 1 Vulnerability
January 22, 2024
Learn more Learn more about Achievements

Showing 1-20 of 400 Vulnerabilities

Barter <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-54346
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
hmd <= 2.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-54350
Dec 14, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Appsplate <= 2.1.3 - Unauthenticated SQL Injection
7.5
CVE-2024-54292
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
9.8
CVE-2024-10124
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Zita Site Builder <= 1.0.2 - Missing Authorization to Arbitrary Plugin Installation
9.8
CVE-2024-54369
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Firebase OTP Authentication <= 1.0.1 - Missing Authorization to Privilege Escalation
9.8
CVE-2024-54294
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CoSchool LMS <= 1.2 - Missing Authorization to Privilege Escalation
9.8
CVE-2024-54296
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ListApp Mobile Manager <= 1.7.7 - Missing Authorization to Privilege Escalation
9.8
CVE-2024-54295
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Projectopia <= 5.1.7 - Missing Authorization to Privilege Escalation via pto_reset_password()
9.8
CVE-2024-54336
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vBSSO-lite <= 1.4.3 - Missing Authorization to Privilege Escalation
9.8
CVE-2024-54297
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Brand <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-54348
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Plain Post <= 1.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2024-54349
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CE21 Suite <= 2.2.0 - Unauthenticated Privilege Escalation
9.8
CVE-2024-54293
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Hive Support – WordPress Help Desk <= 1.1.2 - Authenticated (Subscriber+) SQL Injection
6.5
CVE-2024-54304
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Bicycleshop <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-54345
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Advance Menu Manager <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Settings Change
4.3
CVE-2024-54381
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
TAX SERVICE Electronic HDM <= 1.1.2 - Unauthenticated SQL Injection
7.5
CVE-2024-54261
Dec 6, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
5.4
CVE-2024-9872
Dec 5, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
NewsMash <= 1.0.71 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-10849
Dec 5, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
NewsMunch <= 1.0.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-10848
Dec 4, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Barter <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-54346 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 19, 2024
hmd <= 2.0 - Reflected Cross-Site Scripting CVE-2024-54350 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 14, 2024
Appsplate <= 2.1.3 - Unauthenticated SQL Injection CVE-2024-54292 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N December 11, 2024
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation CVE-2024-10124 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 11, 2024
Zita Site Builder <= 1.0.2 - Missing Authorization to Arbitrary Plugin Installation CVE-2024-54369 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 11, 2024
Firebase OTP Authentication <= 1.0.1 - Missing Authorization to Privilege Escalation CVE-2024-54294 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 11, 2024
CoSchool LMS <= 1.2 - Missing Authorization to Privilege Escalation CVE-2024-54296 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 11, 2024
ListApp Mobile Manager <= 1.7.7 - Missing Authorization to Privilege Escalation CVE-2024-54295 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 11, 2024
Projectopia <= 5.1.7 - Missing Authorization to Privilege Escalation via pto_reset_password() CVE-2024-54336 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 11, 2024
vBSSO-lite <= 1.4.3 - Missing Authorization to Privilege Escalation CVE-2024-54297 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 11, 2024
Brand <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-54348 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 11, 2024
Plain Post <= 1.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-54349 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 11, 2024
CE21 Suite <= 2.2.0 - Unauthenticated Privilege Escalation CVE-2024-54293 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 11, 2024
Hive Support – WordPress Help Desk <= 1.1.2 - Authenticated (Subscriber+) SQL Injection CVE-2024-54304 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N December 11, 2024
Bicycleshop <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-54345 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 11, 2024
Advance Menu Manager <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Settings Change CVE-2024-54381 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N December 11, 2024
TAX SERVICE Electronic HDM <= 1.1.2 - Unauthenticated SQL Injection CVE-2024-54261 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N December 6, 2024
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-9872 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N December 5, 2024
NewsMash <= 1.0.71 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-10849 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 5, 2024
NewsMunch <= 1.0.35 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-10848 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 4, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation