theviper17y

68
All Time Ranking
50
All Time Discoveries
22
90 Day Published Submissions
23 Dec '24
Last Published Submission
Submitted 10 Vulnerabilities
Submitted 10 Vulnerabilities
October 29, 2024
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
October 17, 2024
Submitted XSS Vulnerability
Submitted XSS Vulnerability
September 12, 2024
Submitted 1 Vulnerability
Submitted 1 Vulnerability
August 20, 2024

Showing 1-20 of 50 Vulnerabilities

Title CVE ID CVSS Vector Date
Responsive Blocks – WordPress Gutenberg Blocks <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12268 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 23, 2024
Spoki – Chat Buttons and WooCommerce Notifications <= 2.15.14 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11893 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 19, 2024
Sell Tickets Online – TicketSource Ticket Shop for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11784 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 19, 2024
Taeggie Feed <= 0.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11748 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 17, 2024
Animated Counters <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11905 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 16, 2024
TPG Get Posts <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11906 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 16, 2024
Wp photo text slider 50 <= 8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11884 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 13, 2024
WP Crowdfunding <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11910 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 12, 2024
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.10 - Authenticated (Contributor+) Local File Inclusion via 'theme' CVE-2024-12040 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 11, 2024
Snippet Shortcodes <= 4.1.6 - Authenticated (Subscriber+) Shortcode Deletion CVE-2024-12018 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N December 11, 2024
Integrate Firebase <= 0.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11785 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 11, 2024
Video & Photo Gallery for Ultimate Member <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2024-54370 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 11, 2024
EduAdmin Booking <= 5.2.0 - Authenticated (Contributor+) Local File Inclusion CVE-2024-54373 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 11, 2024
Email Address Obfuscation <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter CVE-2024-11935 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 3, 2024
Captivate Sync <= 2.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVE-2024-53820 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 2, 2024
WP Mermaid <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-53748 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 28, 2024
Video Player for WPBakery <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-53747 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 28, 2024
Simple Popup <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-53741 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 28, 2024
μ†Œμ…œ 곡유 λ²„νŠΌ By μ½”μŠ€λͺ¨μŠ€νŒœ <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-53745 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 28, 2024
StreamWeasels YouTube Integration <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11788 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 27, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation