Wordfence Intelligence   >   Vulnerability Researchers   >   Abdi Pranata

Abdi Pranata

6
All Time Ranking
260
All Time Discoveries

Showing 41-60 of 260 Vulnerabilities

WP Media Category Management <= 2.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-32950
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Link Juice Keeper <= 2.0.2 - Authenticated(Admin+) Stored Cross-Site Scripting
5.5
CVE-2023-25793
Feb 10, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Revolut Gateway for WooCommerce <= 4.9.7 - Missing Authorization
5.4
CVE-2023-52224
Jan 8, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
RabbitLoader <= 2.19.13 - Missing Authorization via multiple AJAX actions
5.4
CVE-2024-21751
Jan 8, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Simple Staff List <= 2.2.4 - Missing Authorization via ajax_flush_rewrite_rules and staff_member_export
5.4
CVE-2023-51526
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Doofinder for WooCommerce <= 2.0.33 - Missing Authorization via multiple AJAX actions
5.4
CVE-2023-51678
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Awesome Support <= 6.1.10 - Missing Authorization
5.4
CVE-2023-49757
Dec 4, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Download canvasio3D Light <= 2.5.0 - Missing Authorization
5.4
CVE-2023-48776
Nov 28, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10 - Missing Authorization to Template Import
5.4
CVE-2023-47822
Nov 15, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
My Shortcodes <= 2.3 - Missing Authorization via Multiple AJAX Actions
5.4
CVE-2023-46632
Oct 25, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Quill Forms <= 3.3.0 - Missing Authorization
5.4
CVE-2023-46610
Oct 24, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Quill Forms <= 3.3.0 - Cross-Site Request Forgery
5.4
CVE-2023-46610
Oct 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
MailChimp Forms by MailMunch <= 3.1.7 - Cross-Site Request Forgery via Multiple AJAX actions
5.4
CVE-2023-45748
Oct 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
WordPress Backup & Migration <= 1.4.1 - Missing Authorization to Settings and Schedule Modification
5.4
CVE-2023-45636
Oct 11, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization in Reviews Exporter
5.4
CVE-2023-45101
Oct 6, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Discussion Board <= 2.4.8 - Authenticated (Subscriber+) Content Injection
5.4
CVE-2023-39161
Jul 26, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Sublanguage <= 2.9 - Missing Authorization
5.4
CVE-2023-36695
Jul 4, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Image Regenerate & Select Crop <= 7.1.0 - Missing Authorization
5.4
CVE-2023-36680
Jul 4, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in savetmplfile function
5.4
CVE-2023-25707
Feb 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in saveconfig function
5.4
CVE-2023-25707
Feb 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Title CVE ID CVSS Vector Date
WP Media Category Management <= 2.2 - Reflected Cross-Site Scripting CVE-2024-32950 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 22, 2024
Link Juice Keeper <= 2.0.2 - Authenticated(Admin+) Stored Cross-Site Scripting CVE-2023-25793 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N February 10, 2023
Revolut Gateway for WooCommerce <= 4.9.7 - Missing Authorization CVE-2023-52224 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N January 8, 2024
RabbitLoader <= 2.19.13 - Missing Authorization via multiple AJAX actions CVE-2024-21751 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L January 8, 2024
Simple Staff List <= 2.2.4 - Missing Authorization via ajax_flush_rewrite_rules and staff_member_export CVE-2023-51526 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N December 27, 2023
Doofinder for WooCommerce <= 2.0.33 - Missing Authorization via multiple AJAX actions CVE-2023-51678 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L December 27, 2023
Awesome Support <= 6.1.10 - Missing Authorization CVE-2023-49757 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N December 4, 2023
Download canvasio3D Light <= 2.5.0 - Missing Authorization CVE-2023-48776 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N November 28, 2023
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10 - Missing Authorization to Template Import CVE-2023-47822 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L November 15, 2023
My Shortcodes <= 2.3 - Missing Authorization via Multiple AJAX Actions CVE-2023-46632 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L October 25, 2023
Quill Forms <= 3.3.0 - Missing Authorization CVE-2023-46610 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L October 24, 2023
Quill Forms <= 3.3.0 - Cross-Site Request Forgery CVE-2023-46610 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 24, 2023
MailChimp Forms by MailMunch <= 3.1.7 - Cross-Site Request Forgery via Multiple AJAX actions CVE-2023-45748 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 12, 2023
WordPress Backup & Migration <= 1.4.1 - Missing Authorization to Settings and Schedule Modification CVE-2023-45636 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L October 11, 2023
Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization in Reviews Exporter CVE-2023-45101 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N October 6, 2023
Discussion Board <= 2.4.8 - Authenticated (Subscriber+) Content Injection CVE-2023-39161 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L July 26, 2023
Sublanguage <= 2.9 - Missing Authorization CVE-2023-36695 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L July 4, 2023
Image Regenerate & Select Crop <= 7.1.0 - Missing Authorization CVE-2023-36680 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L July 4, 2023
VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in savetmplfile function CVE-2023-25707 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L February 15, 2023
VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in saveconfig function CVE-2023-25707 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L February 15, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation