Wordfence Intelligence   >   Vulnerability Researchers   >   yudha

yudha

217
All Time Ranking
12
All Time Discoveries
12
90 Day Published Submissions
19 Dec '24
Last Published Submission

About

i'm new and still learning, but hey, i think i find my first bounty.

4 Achievements

Learn more about Achievements
Submitted 10 Vulnerabilities
Submitted 10 Vulnerabilities
December 17, 2024
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
December 13, 2024
Submitted XSS Vulnerability
Submitted XSS Vulnerability
December 5, 2024
Submitted 1 Vulnerability
Submitted 1 Vulnerability
September 30, 2024
Learn more Learn more about Achievements

12 Vulnerabilities

NACC WordPress Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-12506
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
PCRecruiter Extensions <= 1.4.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-11776
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Philantro – Donations and Donor Management <= 5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-12500
Dec 17, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
TCBD Popover <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-11751
Dec 13, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Cricket Live Score <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-11877
Dec 13, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
The Permalinker <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-11894
Dec 13, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Eveeno <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-11752
Dec 13, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Ganohrs Toggle Shortcode <= 0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-12459
Dec 13, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Simple Locator <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-12501
Dec 13, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
NewsmanApp <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-11767
Dec 12, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
TwentyTwenty <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-11352
Dec 5, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read
6.5
CVE-2024-9224
Sep 30, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Title CVE ID CVSS Vector Date
NACC WordPress Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12506 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 19, 2024
PCRecruiter Extensions <= 1.4.22 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11776 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 19, 2024
Philantro – Donations and Donor Management <= 5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12500 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 17, 2024
TCBD Popover <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11751 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 13, 2024
Cricket Live Score <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11877 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 13, 2024
The Permalinker <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11894 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 13, 2024
Eveeno <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11752 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 13, 2024
Ganohrs Toggle Shortcode <= 0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12459 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 13, 2024
Simple Locator <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12501 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 13, 2024
NewsmanApp <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11767 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 12, 2024
TwentyTwenty <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11352 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 5, 2024
Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read CVE-2024-9224 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N September 30, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation