Wordfence Intelligence   >   Vulnerability Researchers   >   Abdi Pranata

Abdi Pranata

6
All Time Ranking
266
All Time Discoveries

Showing 101-120 of 266 Vulnerabilities

PayTR Taksit Tablosu <= 1.3.1 - Missing Authorization
5.3
CVE-2023-47847
Nov 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Conditional Fields for Contact Form 7 <= 2.4.1 - Missing Authorization
4.3
CVE-2023-47838
Nov 16, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
FormCraft <= 1.2.7 - Missing Authorization via formcraft_nag_update
5.3
CVE-2023-47823
Nov 16, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Restaurant & Cafe Addon for Elementor <= 1.5.3 - Missing Authorization via multiple AJAX functions
3.1
CVE-2023-47826
Nov 16, 2023
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
10WebAnalytics <= 1.2.12 - Missing Authorization via gawd_wd_bp_install_notice_status
4.3
CVE-2023-47807
Nov 16, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WP Meta and Date Remover <= 2.3.0 - Cross-Site Request Forgery via updateSettings
5.3
CVE-2023-47836
Nov 16, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
wpMandrill <= 1.33 - Missing Authorization via getAjaxStats
4.3
CVE-2023-47828
Nov 16, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Acme Fix Images <= 1.0.0 - Missing Authorization via acme_fix_images_ajax_callback
5.3
CVE-2023-47793
Nov 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10 - Missing Authorization to Template Import
5.4
CVE-2023-47822
Nov 15, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
WPCafe <= 2.2.22 - Missing Authorization
5.3
CVE-2023-47805
Nov 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WP Like Button <= 1.7.0 - Missing Authorization via crublabFBLBAjax
3.1
CVE-2023-47820
Nov 15, 2023
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
EasyAzon – Amazon Associates Affiliate <= 5.1.0 - Missing Authorization on AJAX actions
4.3
CVE-2023-47780
Nov 14, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
miniorange otp verification <= 4.2.1 - Missing Authorization via dismiss_notice
4.3
CVE-2023-47776
Nov 14, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
LuckyWP Scripts Control <= 1.2.1 - Missing Authorization
4.3
CVE-2023-47778
Nov 14, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Conditional Fields for Contact Form 7 <= 2.4.0 - Missing Authorization
4.3
CVE ID Unknown
Nov 14, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Big File Uploads <= 2.1.1 - Cross-Site Request Forgery via actions
4.3
CVE-2023-47792
Nov 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Events Addon for Elementor <= 2.1.2 - Missing Authorization
5.3
CVE-2023-47827
Nov 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AWeber <= 7.3.9 - Missing Authorization via AJAX actions
6.3
CVE-2023-47757
Nov 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Welcome Email Editor <= 5.0.5 - Missing Authorization via ajax_handler
5.3
CVE-2023-47756
Nov 13, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WooCommerce Product Carousel Slider <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
6.4
CVE-2023-47755
Nov 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
PayTR Taksit Tablosu <= 1.3.1 - Missing Authorization CVE-2023-47847 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N November 20, 2023
Conditional Fields for Contact Form 7 <= 2.4.1 - Missing Authorization CVE-2023-47838 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 16, 2023
FormCraft <= 1.2.7 - Missing Authorization via formcraft_nag_update CVE-2023-47823 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N November 16, 2023
Restaurant & Cafe Addon for Elementor <= 1.5.3 - Missing Authorization via multiple AJAX functions CVE-2023-47826 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N November 16, 2023
10WebAnalytics <= 1.2.12 - Missing Authorization via gawd_wd_bp_install_notice_status CVE-2023-47807 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 16, 2023
WP Meta and Date Remover <= 2.3.0 - Cross-Site Request Forgery via updateSettings CVE-2023-47836 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N November 16, 2023
wpMandrill <= 1.33 - Missing Authorization via getAjaxStats CVE-2023-47828 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N November 16, 2023
Acme Fix Images <= 1.0.0 - Missing Authorization via acme_fix_images_ajax_callback CVE-2023-47793 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N November 15, 2023
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10 - Missing Authorization to Template Import CVE-2023-47822 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L November 15, 2023
WPCafe <= 2.2.22 - Missing Authorization CVE-2023-47805 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N November 15, 2023
WP Like Button <= 1.7.0 - Missing Authorization via crublabFBLBAjax CVE-2023-47820 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N November 15, 2023
EasyAzon – Amazon Associates Affiliate <= 5.1.0 - Missing Authorization on AJAX actions CVE-2023-47780 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 14, 2023
miniorange otp verification <= 4.2.1 - Missing Authorization via dismiss_notice CVE-2023-47776 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 14, 2023
LuckyWP Scripts Control <= 1.2.1 - Missing Authorization CVE-2023-47778 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 14, 2023
Conditional Fields for Contact Form 7 <= 2.4.0 - Missing Authorization 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 14, 2023
Big File Uploads <= 2.1.1 - Cross-Site Request Forgery via actions CVE-2023-47792 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 14, 2023
Events Addon for Elementor <= 2.1.2 - Missing Authorization CVE-2023-47827 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N November 14, 2023
AWeber <= 7.3.9 - Missing Authorization via AJAX actions CVE-2023-47757 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L November 13, 2023
Welcome Email Editor <= 5.0.5 - Missing Authorization via ajax_handler CVE-2023-47756 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N November 13, 2023
WooCommerce Product Carousel Slider <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVE-2023-47755 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 13, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation