Wordfence Intelligence   >   Vulnerability Researchers   >   Bob Matyas

Bob Matyas

36
All Time Ranking
88
All Time Discoveries

Showing 41-60 of 88 Vulnerabilities

MM-email2image <= 0.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-3076
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ENL Newsletter <= 1.0.1 - Cross-Site Request Forgery to Campaign Deletion
4.3
CVE-2024-3059
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
ENL Newsletter <= 1.0.1 - Cross-Site Request Forgery
6.1
CVE-2024-3058
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting via Email Settings
4.4
CVE-2024-2603
Apr 5, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Bannerlid <= 1.1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-3048
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
MM-email2image <= 0.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2024-3075
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
NPS computy <= 2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-1754
Mar 25, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Fancy Product Designer < 6.1.81 - Authenticated (Admin+) Stored Cross-Site Scripting via Product Title
4.4
CVE-2024-0902
Mar 25, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
NPS computy <= 2.7.5 - Cross-Site Request Forgery to Results Deletion
4.3
CVE-2024-1755
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Advance Search <= 1.1.6 - Cross-Site Request Forgery to Shortcode Deletion
4.3
CVE-2024-2739
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Simple Buttons Creator <=1.04 - Unauthenticated Stored Cross-Site Scripting via Add Button
7.2
CVE-2024-2857
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Simple Buttons Creator <=1.04 - Cross-Site Request Forgery to Arbitrary Button Deletion
5.3
CVE-2024-2858
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CM Download Manager < 2.9.1 - Cross-Site Request Forgery via editHeader
4.3
CVE-2024-1962
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WPB Show Core <= 2.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-1956
Mar 18, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Font Farsi <= 1.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-1752
Mar 18, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Scalable Vector Graphics (SVG) <= 3.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
6.4
CVE-2023-7085
Feb 20, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Persian Fonts <= 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2023-7167
Jan 30, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Allow SVG <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
6.4
CVE-2023-6541
Jan 26, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
illi Link Party! <= 1.0 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2023-7229
Jan 23, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
illi Link Party! <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2023-7230
Jan 23, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
MM-email2image <= 0.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-3076 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 5, 2024
ENL Newsletter <= 1.0.1 - Cross-Site Request Forgery to Campaign Deletion CVE-2024-3059 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L April 5, 2024
ENL Newsletter <= 1.0.1 - Cross-Site Request Forgery CVE-2024-3058 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 5, 2024
Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting via Email Settings CVE-2024-2603 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 5, 2024
Bannerlid <= 1.1.0 - Reflected Cross-Site Scripting CVE-2024-3048 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 5, 2024
MM-email2image <= 0.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-3075 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 5, 2024
NPS computy <= 2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-1754 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 25, 2024
Fancy Product Designer < 6.1.81 - Authenticated (Admin+) Stored Cross-Site Scripting via Product Title CVE-2024-0902 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 25, 2024
NPS computy <= 2.7.5 - Cross-Site Request Forgery to Results Deletion CVE-2024-1755 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 25, 2024
Advance Search <= 1.1.6 - Cross-Site Request Forgery to Shortcode Deletion CVE-2024-2739 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 25, 2024
Simple Buttons Creator <=1.04 - Unauthenticated Stored Cross-Site Scripting via Add Button CVE-2024-2857 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N March 25, 2024
Simple Buttons Creator <=1.04 - Cross-Site Request Forgery to Arbitrary Button Deletion CVE-2024-2858 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 25, 2024
CM Download Manager < 2.9.1 - Cross-Site Request Forgery via editHeader CVE-2024-1962 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 25, 2024
WPB Show Core <= 2.6 - Reflected Cross-Site Scripting CVE-2024-1956 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 18, 2024
Font Farsi <= 1.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-1752 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 18, 2024
Scalable Vector Graphics (SVG) <= 3.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG CVE-2023-7085 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N February 20, 2024
Persian Fonts <= 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-7167 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N January 30, 2024
Allow SVG <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG CVE-2023-6541 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 26, 2024
illi Link Party! <= 1.0 - Cross-Site Request Forgery to Settings Update CVE-2023-7229 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 23, 2024
illi Link Party! <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-7230 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N January 23, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation