Wordfence Intelligence   >   Vulnerability Researchers   >   Abdi Pranata

Abdi Pranata

6
All Time Ranking
266
All Time Discoveries

Showing 121-140 of 266 Vulnerabilities

Essential Blocks for Gutenberg <= 4.2.0 - Missing Authorization via AJAX actions
4.3
CVE-2023-47760
Nov 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Simple 301 Redirects by BetterLinks <= 2.0.7 - Missing Authorization via clicked
4.3
CVE-2023-47761
Nov 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
BetterDocs <= 2.5.2 - Missing Authorization via AJAX actions
4.3
CVE-2023-47762
Nov 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Ditty <= 3.1.24 - Missing Authorization via save_ditty_permissions_check
5.3
CVE-2023-47764
Nov 13, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WP Custom Admin Interface <= 7.31 - Missing Authorization via wpcai_pro_notice_disable
4.3
CVE-2023-47763
Nov 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Flo Forms <= 1.0.41 - Missing Authorization via flo_send_test_email
4.3
CVE-2023-47692
Nov 9, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Auto Tag Creator <= 1.0.2 - Missing Authorization via tag_save_settings_callback
4.3
CVE-2023-47523
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Dragfy Addons for Elementor <= 1.0.2 - Missing Authorization via save_settings
4.3
CVE-2023-47661
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
MSHOP MY SITE <= 1.1.7 - Missing Authorization via update_settings
4.3
CVE-2023-47243
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Seers <= 8.1.1 - Missing Authorization via multiple AJAX actions
5.3
CVE-2023-47515
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
ARI Stream Quiz <= 1.3.2 - Authenticated(Contributor+) Content Injection
4.3
CVE-2023-47513
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Image Hover Effects <= 5.5 - Cross-Site Request Forgery
4.3
CVE-2023-47552
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
ANAC XML Bandi di Gara <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
6.4
CVE-2023-47242
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CBX Map for Google Map & OpenStreetMap <= 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
6.4
CVE-2023-47240
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Foyer <= 1.7.5 - Content Injection via Improper Access Control
4.3
CVE-2023-47663
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WordPress Backup & Migration <= 1.4.3 - Missing Authorization to Settings Update
4.3
CVE-2023-5737
Nov 6, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Animated Rotating Words <= 5.4 - Missing Authorization via save_admin_options
4.3
CVE-2023-47187
Nov 3, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Animated Rotating Words <= 5.4 - Cross-Site Request Forgery via save_admin_options
4.3
CVE-2023-47187
Nov 3, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Short URL <= 1.6.8 - Missing Authorization via multiple AJAX functions
6.5
CVE-2023-47225
Nov 3, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
ShortCodes UI <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2023-47231
Nov 3, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Essential Blocks for Gutenberg <= 4.2.0 - Missing Authorization via AJAX actions CVE-2023-47760 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 13, 2023
Simple 301 Redirects by BetterLinks <= 2.0.7 - Missing Authorization via clicked CVE-2023-47761 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 13, 2023
BetterDocs <= 2.5.2 - Missing Authorization via AJAX actions CVE-2023-47762 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 13, 2023
Ditty <= 3.1.24 - Missing Authorization via save_ditty_permissions_check CVE-2023-47764 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N November 13, 2023
WP Custom Admin Interface <= 7.31 - Missing Authorization via wpcai_pro_notice_disable CVE-2023-47763 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 13, 2023
Flo Forms <= 1.0.41 - Missing Authorization via flo_send_test_email CVE-2023-47692 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 9, 2023
Auto Tag Creator <= 1.0.2 - Missing Authorization via tag_save_settings_callback CVE-2023-47523 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 7, 2023
Dragfy Addons for Elementor <= 1.0.2 - Missing Authorization via save_settings CVE-2023-47661 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 7, 2023
MSHOP MY SITE <= 1.1.7 - Missing Authorization via update_settings CVE-2023-47243 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 7, 2023
Seers <= 8.1.1 - Missing Authorization via multiple AJAX actions CVE-2023-47515 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N November 7, 2023
ARI Stream Quiz <= 1.3.2 - Authenticated(Contributor+) Content Injection CVE-2023-47513 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 7, 2023
Image Hover Effects <= 5.5 - Cross-Site Request Forgery CVE-2023-47552 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 7, 2023
ANAC XML Bandi di Gara <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVE-2023-47242 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 7, 2023
CBX Map for Google Map & OpenStreetMap <= 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVE-2023-47240 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 7, 2023
Foyer <= 1.7.5 - Content Injection via Improper Access Control CVE-2023-47663 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 7, 2023
WordPress Backup & Migration <= 1.4.3 - Missing Authorization to Settings Update CVE-2023-5737 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 6, 2023
Animated Rotating Words <= 5.4 - Missing Authorization via save_admin_options CVE-2023-47187 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 3, 2023
Animated Rotating Words <= 5.4 - Cross-Site Request Forgery via save_admin_options CVE-2023-47187 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 3, 2023
Short URL <= 1.6.8 - Missing Authorization via multiple AJAX functions CVE-2023-47225 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L November 3, 2023
ShortCodes UI <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-47231 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 3, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation