theviper17y

68
All Time Ranking
50
All Time Discoveries
22
90 Day Published Submissions
23 Dec '24
Last Published Submission
Submitted 10 Vulnerabilities
Submitted 10 Vulnerabilities
October 29, 2024
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
October 17, 2024
Submitted XSS Vulnerability
Submitted XSS Vulnerability
September 12, 2024
Submitted 1 Vulnerability
Submitted 1 Vulnerability
August 20, 2024

Showing 41-50 of 50 Vulnerabilities

Title CVE ID CVSS Vector Date
Booking.com Banner Creator <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-49265 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 14, 2024
My Favorites <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-49263 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 14, 2024
Login Logout Shortcode <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter CVE-2024-9421 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 3, 2024
Display Medium Posts <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via display_medium_posts Shortcode CVE-2024-9445 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 3, 2024
WP-WebAuthn <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-47650 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N September 30, 2024
RumbleTalk Live Group Chat – HTML5 <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-8720 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N September 30, 2024
Review & testimonial widgets <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-44022 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N September 24, 2024
Email Obfuscate Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-8747 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N September 12, 2024
Snippet Shortcodes <= 4.1.6 - Authenticated (Subscriber+) Shortcode Deletion CVE-2024-12018 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N December 11, 2024
IdeaPush <= 8.69 - Cross-Site Request Forgery CVE-2024-49275 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N October 14, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation