Wordfence Intelligence   >   Vulnerability Researchers   >   Abdi Pranata

Abdi Pranata

6
All Time Ranking
260
All Time Discoveries

Showing 41-60 of 260 Vulnerabilities

EventPrime <= 3.3.9 - Improper Input Validation via save_event_booking
5.3
CVE-2024-24832
Feb 2, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Shareaholic <= 9.7.11 - Missing Authorization via accept_terms_of_service
4.3
CVE-2024-24709
Jan 31, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Feed Them Social <= 4.2.0 - Cross-Site Request Forgery via review_nag_check
3.5
CVE-2024-24710
Jan 31, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
WooCommerce Conversion Tracking <= 2.0.11 - Missing Authorization via wcct_install_happy_addons
4.3
CVE-2024-24711
Jan 31, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
ACF Photo Gallery Field <= 2.6 - Missing Authorization in apgf_update_donation
4.3
CVE-2024-23518
Jan 30, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
PopupAlly <= 2.1.0 - Cross-Site Request Forgery via optin_submit_callback
4.3
CVE-2024-23520
Jan 30, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Amelia <= 1.0.98 - Missing Authorization
6.5
CVE-2024-22298
Jan 17, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Slider by Supsystic <= 1.8.6 - Missing Authorization
4.3
CVE-2024-22303
Jan 17, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Revolut Gateway for WooCommerce <= 4.9.7 - Missing Authorization
5.4
CVE-2023-52224
Jan 8, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
MailerLite – WooCommerce integration <= 2.0.8 - Missing Authorization via Multiple Functions
4.3
CVE-2023-52227
Jan 8, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
RabbitLoader <= 2.19.13 - Missing Authorization via multiple AJAX actions
5.4
CVE-2024-21751
Jan 8, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Quiz Maker <= 6.5.1.1 - Missing Authorization
4.3
CVE-2024-21743
Jan 5, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WooCommerce Conversion Tracking <= 2.0.11 - Missing Authorization
4.3
CVE-2023-52217
Jan 3, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
BookingPress <= 1.0.74 - Booking Price Manipulation via bookingpress_confirm_booking
7.5
CVE-2023-51405
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
BulkGate SMS Plugin for WooCommerce <= 3.0.2 - Missing Authorization via Multiple AJAX Actions
4.3
CVE-2023-51679
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WooCommerce Easy Duplicate Product <= 0.3.0.7 - Missing Authorization via wedp_duplicate_product_action
4.3
CVE-2023-51523
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Simple Staff List <= 2.2.4 - Missing Authorization via ajax_flush_rewrite_rules and staff_member_export
5.4
CVE-2023-51526
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Slider by Soliloquy <= 2.7.2 - Missing Authorization
4.3
CVE-2023-51519
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Doofinder for WooCommerce <= 2.0.33 - Missing Authorization via multiple AJAX actions
5.4
CVE-2023-51678
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via CR_Manual
5.3
CVE-2023-51692
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
EventPrime <= 3.3.9 - Improper Input Validation via save_event_booking CVE-2024-24832 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N February 2, 2024
Shareaholic <= 9.7.11 - Missing Authorization via accept_terms_of_service CVE-2024-24709 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 31, 2024
Feed Them Social <= 4.2.0 - Cross-Site Request Forgery via review_nag_check CVE-2024-24710 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N January 31, 2024
WooCommerce Conversion Tracking <= 2.0.11 - Missing Authorization via wcct_install_happy_addons CVE-2024-24711 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 31, 2024
ACF Photo Gallery Field <= 2.6 - Missing Authorization in apgf_update_donation CVE-2024-23518 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 30, 2024
PopupAlly <= 2.1.0 - Cross-Site Request Forgery via optin_submit_callback CVE-2024-23520 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 30, 2024
Amelia <= 1.0.98 - Missing Authorization CVE-2024-22298 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N January 17, 2024
Slider by Supsystic <= 1.8.6 - Missing Authorization CVE-2024-22303 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 17, 2024
Revolut Gateway for WooCommerce <= 4.9.7 - Missing Authorization CVE-2023-52224 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N January 8, 2024
MailerLite – WooCommerce integration <= 2.0.8 - Missing Authorization via Multiple Functions CVE-2023-52227 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 8, 2024
RabbitLoader <= 2.19.13 - Missing Authorization via multiple AJAX actions CVE-2024-21751 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L January 8, 2024
Quiz Maker <= 6.5.1.1 - Missing Authorization CVE-2024-21743 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 5, 2024
WooCommerce Conversion Tracking <= 2.0.11 - Missing Authorization CVE-2023-52217 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 3, 2024
BookingPress <= 1.0.74 - Booking Price Manipulation via bookingpress_confirm_booking CVE-2023-51405 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N December 27, 2023
BulkGate SMS Plugin for WooCommerce <= 3.0.2 - Missing Authorization via Multiple AJAX Actions CVE-2023-51679 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N December 27, 2023
WooCommerce Easy Duplicate Product <= 0.3.0.7 - Missing Authorization via wedp_duplicate_product_action CVE-2023-51523 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N December 27, 2023
Simple Staff List <= 2.2.4 - Missing Authorization via ajax_flush_rewrite_rules and staff_member_export CVE-2023-51526 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N December 27, 2023
Slider by Soliloquy <= 2.7.2 - Missing Authorization CVE-2023-51519 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N December 27, 2023
Doofinder for WooCommerce <= 2.0.33 - Missing Authorization via multiple AJAX actions CVE-2023-51678 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L December 27, 2023
Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via CR_Manual CVE-2023-51692 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 27, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation