Wordfence Intelligence   >   Vulnerability Researchers   >   thiennv

thiennv

26
All Time Ranking
183
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 41-60 of 183 Vulnerabilities

WP Quick Shop <= 1.3.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-54344
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Role Includer <= 1.6 - Reflected Cross-Site Scripting via user_id Parameter
6.1
CVE-2024-54290
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Connect Contact Form 7 to Constant Contact <= 1.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-54343
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ImageRecycle pdf & image compression <= 3.1.16 - Reflected Cross-Site Scripting
6.1
CVE-2024-54266
Dec 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ni WooCommerce Order Export <= 3.1.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-54231
Dec 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ni CRM Lead <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
6.5
CVE-2024-54258
Dec 5, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Ni WooCommerce Bulk Product Editor <= 1.4.5 - Reflected Cross-Site Scripting
6.1
CVE-2024-54236
Dec 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
DancePress (TRWA) <= 3.1.11 - Cross-Site Request Forgery
4.7
CVE-2024-53775
Nov 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Awesome Event Booking <= 2.7.1 - Reflected Cross-Site Scripting
6.1
CVE-2025-24560
Nov 27, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ahmeti Wp Güzel Sözler <= 4.0 - Cross-Site Request Forgery
4.3
CVE-2024-53707
Nov 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Search order by product SKU for WooCommerce <= 0.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-51693
Nov 4, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ajax Content Filter <= 1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-51717
Nov 4, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Satisfaction Reports from Help Scout <= 2.0.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-51778
Nov 4, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Manage User Columns <= 1.0.5 - Cross-Site Request Forgery
4.3
CVE-2024-51686
Nov 1, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP User Switch <= 1.1.0 - Authenticated (Subscriber+) Privilege Escalation
8.8
CVE-2024-37560
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vimeography: Vimeo Video Gallery WordPress Plugin <= 2.4.1 - Cross-Site Request Forgery
4.3
CVE-2024-35770
Jun 18, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
MJ Update History <= 1.0.4 - Missing Authorization
4.3
CVE-2024-35671
Jun 3, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Democracy Poll <= 6.0.3 - Missing Authorization
5.3
CVE-2024-33920
Apr 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Contact Form 7 Extension For Mailchimp <= 0.5.70 - Cross-Site Request Forgery
4.3
CVE-2024-33677
Apr 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Total Poll Lite <= 4.9.9 - Missing Authorization
4.3
CVE-2024-32821
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
WP Quick Shop <= 1.3.1 - Reflected Cross-Site Scripting CVE-2024-54344 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 11, 2024
Role Includer <= 1.6 - Reflected Cross-Site Scripting via user_id Parameter CVE-2024-54290 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 11, 2024
Connect Contact Form 7 to Constant Contact <= 1.4 - Reflected Cross-Site Scripting CVE-2024-54343 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 11, 2024
ImageRecycle pdf & image compression <= 3.1.16 - Reflected Cross-Site Scripting CVE-2024-54266 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 10, 2024
Ni WooCommerce Order Export <= 3.1.6 - Reflected Cross-Site Scripting CVE-2024-54231 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 5, 2024
Ni CRM Lead <= 1.3.0 - Authenticated (Subscriber+) SQL Injection CVE-2024-54258 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N December 5, 2024
Ni WooCommerce Bulk Product Editor <= 1.4.5 - Reflected Cross-Site Scripting CVE-2024-54236 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 5, 2024
DancePress (TRWA) <= 3.1.11 - Cross-Site Request Forgery CVE-2024-53775 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N November 28, 2024
Awesome Event Booking <= 2.7.1 - Reflected Cross-Site Scripting CVE-2025-24560 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 27, 2024
Ahmeti Wp Güzel Sözler <= 4.0 - Cross-Site Request Forgery CVE-2024-53707 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 22, 2024
Search order by product SKU for WooCommerce <= 0.2 - Reflected Cross-Site Scripting CVE-2024-51693 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 4, 2024
Ajax Content Filter <= 1.0 - Reflected Cross-Site Scripting CVE-2024-51717 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 4, 2024
Satisfaction Reports from Help Scout <= 2.0.3 - Reflected Cross-Site Scripting CVE-2024-51778 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 4, 2024
Manage User Columns <= 1.0.5 - Cross-Site Request Forgery CVE-2024-51686 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 1, 2024
WP User Switch <= 1.1.0 - Authenticated (Subscriber+) Privilege Escalation CVE-2024-37560 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H July 9, 2024
Vimeography: Vimeo Video Gallery WordPress Plugin <= 2.4.1 - Cross-Site Request Forgery CVE-2024-35770 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 18, 2024
MJ Update History <= 1.0.4 - Missing Authorization CVE-2024-35671 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 3, 2024
Democracy Poll <= 6.0.3 - Missing Authorization CVE-2024-33920 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 29, 2024
Contact Form 7 Extension For Mailchimp <= 0.5.70 - Cross-Site Request Forgery CVE-2024-33677 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 26, 2024
Total Poll Lite <= 4.9.9 - Missing Authorization CVE-2024-32821 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 22, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

This site uses cookies in accordance with our Privacy Policy.