Wordfence Intelligence   >   Vulnerability Researchers   >   Abdi Pranata

Abdi Pranata

6
All Time Ranking
260
All Time Discoveries

Showing 101-120 of 260 Vulnerabilities

Multiple WPOnlineSupport Plugins <= (Various Versions) - Missing Authorization to Notice Dismissal
5.3
CVE-2023-40200
Aug 16, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WP Clone Menu <= 1.0.1 - Missing Authorization to Menu Clone
5.3
CVE-2023-38395
Jul 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Instant CSS <= 1.1.4 - Missing Authorization via AJAX Actions
5.3
CVE-2023-38483
Jul 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Yet Another Stars Rating <= 3.3.8 - Missing Authorization to Vote Tampering
5.3
CVE-2023-37867
Jul 10, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Cryptocurrency Widgets – Price Ticker & Coins List <= 2.6.2 - Missing Authorization
5.3
CVE-2023-36681
Jul 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
BBS e-Popup <= 2.4.5 - Missing Authorization
5.3
CVE-2023-36504
Jun 23, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
ReDi Restaurant Reservation <= 23.0211 - Missing Authorization
5.3
CVE-2023-36510
Jun 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Fat Rat Collect <= 2.6.0 - Missing Authorization
5.3
CVE-2023-35045
Jun 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in save_admin_widgets function
5.3
CVE-2023-25707
Feb 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Print, PDF, Email by PrintFriendly <= 5.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
4.4
CVE-2023-25032
Oct 12, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Video Gallery <= 1.3.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-25477
Jul 7, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Mobile Call Now & Map Buttons <= 1.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-24401
Jul 4, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Post Snippets <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'snippet_content'
4.4
CVE-2023-25459
May 9, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
CM On Demand Search And Replace <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-31228
Apr 28, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Store Locator WordPress <= 1.4.9 - Authenticated (Editor+) Stored Cross-Site Scripting via 'category_name', 'description', 'description_2' parameters
4.4
CVE-2023-27618
Mar 20, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Klaviyo <= 3.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-25456
Mar 13, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
TypeSquare Webfonts for ConoHa <= 2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-25458
Feb 23, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Wp-Insert <= 2.5.0 Authenticated (Admin+) Stored Cross Site Scripting
4.4
CVE-2023-25461
Feb 15, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Vulnerability: eCommerce Product Catalog plugin for WordPress <= 3.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-25049
Feb 6, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
EZP Coming Soon Page <= 1.0.7.3 - Authenticated (Admin+) Stored Cross Site Scripting
4.4
CVE-2023-24398
Feb 2, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Multiple WPOnlineSupport Plugins <= (Various Versions) - Missing Authorization to Notice Dismissal CVE-2023-40200 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 16, 2023
WP Clone Menu <= 1.0.1 - Missing Authorization to Menu Clone CVE-2023-38395 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N July 24, 2023
Instant CSS <= 1.1.4 - Missing Authorization via AJAX Actions CVE-2023-38483 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N July 24, 2023
Yet Another Stars Rating <= 3.3.8 - Missing Authorization to Vote Tampering CVE-2023-37867 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N July 10, 2023
Cryptocurrency Widgets – Price Ticker & Coins List <= 2.6.2 - Missing Authorization CVE-2023-36681 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N July 4, 2023
BBS e-Popup <= 2.4.5 - Missing Authorization CVE-2023-36504 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N June 23, 2023
ReDi Restaurant Reservation <= 23.0211 - Missing Authorization CVE-2023-36510 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N June 22, 2023
Fat Rat Collect <= 2.6.0 - Missing Authorization CVE-2023-35045 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N June 14, 2023
VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in save_admin_widgets function CVE-2023-25707 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N February 15, 2023
Print, PDF, Email by PrintFriendly <= 5.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings CVE-2023-25032 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N October 12, 2023
Video Gallery <= 1.3.12 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25477 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N July 7, 2023
Mobile Call Now & Map Buttons <= 1.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-24401 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N July 4, 2023
Post Snippets <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'snippet_content' CVE-2023-25459 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 9, 2023
CM On Demand Search And Replace <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-31228 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 28, 2023
Store Locator WordPress <= 1.4.9 - Authenticated (Editor+) Stored Cross-Site Scripting via 'category_name', 'description', 'description_2' parameters CVE-2023-27618 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 20, 2023
Klaviyo <= 3.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25456 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 13, 2023
TypeSquare Webfonts for ConoHa <= 2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25458 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 23, 2023
Wp-Insert <= 2.5.0 Authenticated (Admin+) Stored Cross Site Scripting CVE-2023-25461 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
Vulnerability: eCommerce Product Catalog plugin for WordPress <= 3.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25049 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 6, 2023
EZP Coming Soon Page <= 1.0.7.3 - Authenticated (Admin+) Stored Cross Site Scripting CVE-2023-24398 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 2, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation