AyeCode Ltd

Wordfence Intelligence   >   Vulnerability Researchers   >   AyeCode Ltd

Vulnerabilities Discovered:

7
All Time Discoveries
0
Discoveries since Sep 1, 2023

7 vulnerabilities

WP User Frontend <= 3.5.28 - Privilege Escalation
8.1
CVE-2021-24649
Oct 31, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Registration Magic <= 5.0.1.8 - Reflected Cross-Site Scripting
6.1
CVE-2021-24648
Dec 28, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
RegistrationMagic <= 5.0.1.7 - Authentication Bypass
9.8
CVE-2021-4073
Dec 8, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Pie Register <= 3.7.1.5 - Authentication Bypass
8.1
CVE-2021-24647
Oct 11, 2021
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Pie Register <= 3.7.1.5 - Unauthenticated SQL Injection
9.8
CVE-2021-24731
Oct 11, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP User Manager <= 2.6.2 - Arbitrary User Password Reset
7.5
CVE-2021-24655
Sep 22, 2021
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
User Registration < 2.0.2 - Authenticated Stored Cross-Site Scripting
5.4
CVE-2021-24654
Sep 6, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
WP User Frontend <= 3.5.28 - Privilege Escalation CVE-2021-24649 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N October 31, 2022
Registration Magic <= 5.0.1.8 - Reflected Cross-Site Scripting CVE-2021-24648 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 28, 2021
RegistrationMagic <= 5.0.1.7 - Authentication Bypass CVE-2021-4073 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 8, 2021
Pie Register <= 3.7.1.5 - Authentication Bypass CVE-2021-24647 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H October 11, 2021
Pie Register <= 3.7.1.5 - Unauthenticated SQL Injection CVE-2021-24731 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 11, 2021
WP User Manager <= 2.6.2 - Arbitrary User Password Reset CVE-2021-24655 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H September 22, 2021
User Registration < 2.0.2 - Authenticated Stored Cross-Site Scripting CVE-2021-24654 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N September 6, 2021

Share this researcher's vulnerability discoveries

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation