Wordfence Intelligence   >   Vulnerability Researchers   >   vgo0

vgo0

19
All Time Ranking
227
All Time Discoveries
156
90 Day Published Submissions
10 Jan '25
Last Published Submission

9 Achievements

Learn more about Achievements
Submitted 200 Vulnerabilities
Submitted 200 Vulnerabilities
January 6, 2025
Submitted 100 Vulnerabilities
Submitted 100 Vulnerabilities
November 14, 2024
Submitted 75 Vulnerabilities
Submitted 75 Vulnerabilities
October 17, 2024
Submitted 50 Vulnerabilities
Submitted 50 Vulnerabilities
October 3, 2024
Submitted 25 Vulnerabilities
Submitted 25 Vulnerabilities
September 23, 2024
Submitted 10 Vulnerabilities
Submitted 10 Vulnerabilities
September 12, 2024
Submitted XSS Vulnerability
Submitted XSS Vulnerability
September 4, 2024
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
August 15, 2024
Submitted 1 Vulnerability
Submitted 1 Vulnerability
July 3, 2024
Learn more Learn more about Achievements

Showing 1-20 of 227 Vulnerabilities

Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-12412
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Push Notification for Post and BuddyPress <= 2.06 - Reflected Cross-Site Scripting
6.1
CVE-2024-12407
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-11327
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Action Network <= 1.4.4 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
6.1
CVE-2024-12394
Jan 8, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Deliver via Shipos for WooCommerce <= 2.1.7 - Reflected Cross-Site Scripting via dvsfw_bulk_label_url Parameter
6.1
CVE-2024-12222
Jan 8, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ResAds <= 2.0.6 - Reflected Cross-Site Scripting via Multiple Parameters
6.1
CVE-2024-12122
Jan 8, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
SEMA API <= 5.27 - Reflected Cross-Site Scripting via catid Parameter
6.1
CVE-2024-12285
Jan 8, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CLUEVO LMS, E-Learning Platform <= 1.13.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-11328
Jan 8, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WhatsApp click to chat <= 3.0.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-11686
Jan 8, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Shipping via Planzer for WooCommerce <= 1.0.25 - Reflected Cross-Site Scripting via processed-ids
6.1
CVE-2024-12337
Jan 7, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WooCommerce Digital Content Delivery (incl. DRM) – FlickRocket <= 4.74 - Reflected Cross-Site Scripting
6.1
CVE-2024-12438
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Binary MLM Woocommerce <= 2.0 - Reflected Cross-Site Scripting via 'page'
6.1
CVE-2024-12384
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Woo Ukrposhta <= 1.17.11 - Reflected Cross-Site Scripting via order, post, and idd Parameters
6.1
CVE-2024-12049
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
PayGreen Payment Gateway <= 1.0.26 - Reflected Cross-Site Scripting
6.1
CVE-2024-11810
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Financial Stocks & Crypto Market Data Plugin <= 1.10.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-11690
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Infility Global <= 2.9.8 - Reflected Cross-Site Scripting via set_type Parameter
6.1
CVE-2024-12290
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
SmartEmailing.cz <= 2.2.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-12261
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Same but Different – Related Posts by Taxonomy <= 1.0.16 - Reflected Cross-Site Scripting
6.1
CVE-2024-11363
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Role Includer <= 1.6 - Reflected Cross-Site Scripting via user_id Parameter
6.1
CVE-2024-12124
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
SEO Keywords <= 1.1.3 - Reflected Cross-Site Scripting via google_error Parameter
6.1
CVE-2024-12126
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting CVE-2024-12412 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Push Notification for Post and BuddyPress <= 2.06 - Reflected Cross-Site Scripting CVE-2024-12407 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scripting CVE-2024-11327 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Action Network <= 1.4.4 - Cross-Site Request Forgery to Reflected Cross-Site Scripting CVE-2024-12394 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 8, 2025
Deliver via Shipos for WooCommerce <= 2.1.7 - Reflected Cross-Site Scripting via dvsfw_bulk_label_url Parameter CVE-2024-12222 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 8, 2025
ResAds <= 2.0.6 - Reflected Cross-Site Scripting via Multiple Parameters CVE-2024-12122 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 8, 2025
SEMA API <= 5.27 - Reflected Cross-Site Scripting via catid Parameter CVE-2024-12285 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 8, 2025
CLUEVO LMS, E-Learning Platform <= 1.13.2 - Reflected Cross-Site Scripting CVE-2024-11328 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 8, 2025
WhatsApp click to chat <= 3.0.4 - Reflected Cross-Site Scripting CVE-2024-11686 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 8, 2025
Shipping via Planzer for WooCommerce <= 1.0.25 - Reflected Cross-Site Scripting via processed-ids CVE-2024-12337 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 7, 2025
WooCommerce Digital Content Delivery (incl. DRM) – FlickRocket <= 4.74 - Reflected Cross-Site Scripting CVE-2024-12438 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
Binary MLM Woocommerce <= 2.0 - Reflected Cross-Site Scripting via 'page' CVE-2024-12384 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
Woo Ukrposhta <= 1.17.11 - Reflected Cross-Site Scripting via order, post, and idd Parameters CVE-2024-12049 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
PayGreen Payment Gateway <= 1.0.26 - Reflected Cross-Site Scripting CVE-2024-11810 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
Financial Stocks & Crypto Market Data Plugin <= 1.10.3 - Reflected Cross-Site Scripting CVE-2024-11690 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
Infility Global <= 2.9.8 - Reflected Cross-Site Scripting via set_type Parameter CVE-2024-12290 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
SmartEmailing.cz <= 2.2.0 - Reflected Cross-Site Scripting CVE-2024-12261 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
Same but Different – Related Posts by Taxonomy <= 1.0.16 - Reflected Cross-Site Scripting CVE-2024-11363 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
Role Includer <= 1.6 - Reflected Cross-Site Scripting via user_id Parameter CVE-2024-12124 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
SEO Keywords <= 1.1.3 - Reflected Cross-Site Scripting via google_error Parameter CVE-2024-12126 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation