Wordfence Intelligence   >   Vulnerability Researchers   >   Bob Matyas

Bob Matyas

18
All Time Ranking
169
All Time Discoveries

Showing 1-20 of 169 Vulnerabilities

WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI']
6.1
CVE-2024-5744
Jul 23, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ultimate Classified Listings <= 1.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-5883
Jul 8, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Bug Library <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-5604
Jun 28, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via REQUEST_URI
6.1
CVE-2024-6072
Jun 24, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Customer Editing
6.1
CVE-2024-6074
Jun 24, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Category Editing
6.1
CVE-2024-6076
Jun 24, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Discount Editing
6.1
CVE-2024-6073
Jun 24, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eStore <= 8.5.4 - Cross-Site Request Forgery to Coupon Deletion
4.3
CVE-2024-6075
Jun 24, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WordPress Plugin Tournamatch < 4.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-5644
Jun 22, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
SULly <= 4.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-5033
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
SULly <= 4.3.0 - Cross-Site Request Forgery to Plugin Reset
4.3
CVE-2024-5034
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
SULly <= 4.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-5032
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
OpenPGP Form Encryption for WordPress <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
5.4
CVE-2024-3919
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Embed Peertube Playlist <= 1.07 - Authenticated (Editor+) Stored Cross-Site Scripting
4.4
CVE-2024-4602
Jun 22, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Banner Editing
6.1
CVE-2024-5286
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Registration Form
6.1
CVE-2024-5282
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP eMember <= 10.6.5 - Reflected Cross-Site Scripting via 'editrecord'
6.1
CVE-2024-5075
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Wp EMember <= 10.6.6 - Unauthenticated Stored Cross-Site Scripting
6.1
CVE-2024-5079
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Wp EMember <= 10.6.5 - Cross-Site Request Forgery
6.1
CVE-2024-5077
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Wp EMember <= 10.6.5 - Cross-Site Request Forgery to Bulk Delete
4.3
CVE-2024-5076
Jun 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI'] CVE-2024-5744 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 23, 2024
Ultimate Classified Listings <= 1.2 - Reflected Cross-Site Scripting CVE-2024-5883 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 8, 2024
Bug Library <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-5604 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 28, 2024
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via REQUEST_URI CVE-2024-6072 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 24, 2024
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Customer Editing CVE-2024-6074 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 24, 2024
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Category Editing CVE-2024-6076 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 24, 2024
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Discount Editing CVE-2024-6073 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 24, 2024
WP eStore <= 8.5.4 - Cross-Site Request Forgery to Coupon Deletion CVE-2024-6075 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 24, 2024
WordPress Plugin Tournamatch < 4.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-5644 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 22, 2024
SULly <= 4.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-5033 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
SULly <= 4.3.0 - Cross-Site Request Forgery to Plugin Reset CVE-2024-5034 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 22, 2024
SULly <= 4.3 - Reflected Cross-Site Scripting CVE-2024-5032 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
OpenPGP Form Encryption for WordPress <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-3919 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N June 22, 2024
Embed Peertube Playlist <= 1.07 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2024-4602 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N June 22, 2024
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Banner Editing CVE-2024-5286 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Registration Form CVE-2024-5282 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
WP eMember <= 10.6.5 - Reflected Cross-Site Scripting via 'editrecord' CVE-2024-5075 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
Wp EMember <= 10.6.6 - Unauthenticated Stored Cross-Site Scripting CVE-2024-5079 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
Wp EMember <= 10.6.5 - Cross-Site Request Forgery CVE-2024-5077 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 22, 2024
Wp EMember <= 10.6.5 - Cross-Site Request Forgery to Bulk Delete CVE-2024-5076 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 22, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation