Wordfence Intelligence   >   Vulnerability Researchers   >   Brandon James Roldan (tomorrowisnew)

Brandon James Roldan (tomorrowisnew)

43
All Time Ranking
80
All Time Discoveries

Showing 21-40 of 80 Vulnerabilities

White Label <= 2.9.0 - Cross-Site Request Forgery via white_label_reset_wl_admins
4.3
CVE-2023-52128
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Strong Testimonials <= 3.1.10 - Cross-Site Request Forgery
4.3
CVE-2023-52123
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Simple Job Board <= 2.10.6 - Cross-Site Request Forgery
4.3
CVE-2023-52122
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
NEX-Forms – Ultimate Form Builder <= 8.5.2 - Cross-Site Request Forgery
4.3
CVE-2023-52120
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Icegram <= 3.1.18 - Cross-Site Request Forgery via save_campaign_preview
4.3
CVE-2023-52119
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
RegistrationMagic <= 5.2.5.0 - IP Spoofing
5.3
CVE-2023-51543
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Apollo13 Framework Extensions <= 1.9.1 - Cross-Site Request Forgery
4.3
CVE-2023-51539
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Awesome Support <= 6.1.5 - Cross-Site Request Forgery
4.3
CVE-2023-51538
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Awesome Support <= 6.1.5 - Missing Authorization via wpas_load_reply_history
5.3
CVE-2023-51537
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Spam protection, AntiSpam, FireWall by CleanTalk <= 6.20 - Cross-Site Request Forgery
4.3
CVE-2023-51535
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
GPT3 AI Content Writer <= 1.8.12 - Cross-Site Request Forgery
4.3
CVE-2023-51528
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Power: Complete AI Pack – Powered by GPT-4 <= 1.8.1 - Missing Authorization to Sensitive Data Exposure
5.3
CVE-2023-51527
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
GS Logo Slider <= 3.5.1 - Cross-Site Request Forgery
4.3
CVE-2023-51530
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
HT Mega <= 2.3.3 - Cross-Site Request Forgery via Several Functions
4.3
CVE-2023-51529
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Paid Member Subscriptions <= 2.10.4 - Cross-Site Request Forgery via ajax_add_log_entry
4.3
CVE-2023-51522
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Quiz And Survey Master <= 8.1.18 - Cross-Site Request Forgery
4.3
CVE-2023-51521
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Quiz And Survey Master <= 8.1.16 - Missing Authorization
5.3
CVE-2023-51507
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Thrive Automator <= 1.17 - Cross-Site Request Forgery
4.3
CVE-2023-51531
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Simple Booking Calendar <= 2.0.8.4 - Cross-Site Request Forgery
4.3
CVE-2023-51525
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Branda <= 3.4.14 - IP Address Spoofing
5.3
CVE-2023-51542
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
White Label <= 2.9.0 - Cross-Site Request Forgery via white_label_reset_wl_admins CVE-2023-52128 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 28, 2023
Strong Testimonials <= 3.1.10 - Cross-Site Request Forgery CVE-2023-52123 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 28, 2023
Simple Job Board <= 2.10.6 - Cross-Site Request Forgery CVE-2023-52122 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 28, 2023
NEX-Forms – Ultimate Form Builder <= 8.5.2 - Cross-Site Request Forgery CVE-2023-52120 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 28, 2023
Icegram <= 3.1.18 - Cross-Site Request Forgery via save_campaign_preview CVE-2023-52119 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 28, 2023
RegistrationMagic <= 5.2.5.0 - IP Spoofing CVE-2023-51543 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 27, 2023
Apollo13 Framework Extensions <= 1.9.1 - Cross-Site Request Forgery CVE-2023-51539 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 27, 2023
Awesome Support <= 6.1.5 - Cross-Site Request Forgery CVE-2023-51538 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 27, 2023
Awesome Support <= 6.1.5 - Missing Authorization via wpas_load_reply_history CVE-2023-51537 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N December 27, 2023
Spam protection, AntiSpam, FireWall by CleanTalk <= 6.20 - Cross-Site Request Forgery CVE-2023-51535 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 27, 2023
GPT3 AI Content Writer <= 1.8.12 - Cross-Site Request Forgery CVE-2023-51528 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 27, 2023
AI Power: Complete AI Pack – Powered by GPT-4 <= 1.8.1 - Missing Authorization to Sensitive Data Exposure CVE-2023-51527 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N December 27, 2023
GS Logo Slider <= 3.5.1 - Cross-Site Request Forgery CVE-2023-51530 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 27, 2023
HT Mega <= 2.3.3 - Cross-Site Request Forgery via Several Functions CVE-2023-51529 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 27, 2023
Paid Member Subscriptions <= 2.10.4 - Cross-Site Request Forgery via ajax_add_log_entry CVE-2023-51522 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 27, 2023
Quiz And Survey Master <= 8.1.18 - Cross-Site Request Forgery CVE-2023-51521 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 27, 2023
Quiz And Survey Master <= 8.1.16 - Missing Authorization CVE-2023-51507 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 27, 2023
Thrive Automator <= 1.17 - Cross-Site Request Forgery CVE-2023-51531 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 27, 2023
WP Simple Booking Calendar <= 2.0.8.4 - Cross-Site Request Forgery CVE-2023-51525 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 27, 2023
Branda <= 3.4.14 - IP Address Spoofing CVE-2023-51542 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 27, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation