vgo0

23
All Time Ranking
171
All Time Discoveries
149
90 Day Published Submissions
13 Dec '24
Last Published Submission
Submitted 100 Vulnerabilities
Submitted 100 Vulnerabilities
November 14, 2024
Submitted 75 Vulnerabilities
Submitted 75 Vulnerabilities
October 17, 2024
Submitted 50 Vulnerabilities
Submitted 50 Vulnerabilities
October 3, 2024
Submitted 25 Vulnerabilities
Submitted 25 Vulnerabilities
September 23, 2024
Submitted 10 Vulnerabilities
Submitted 10 Vulnerabilities
September 12, 2024
Submitted XSS Vulnerability
Submitted XSS Vulnerability
September 4, 2024
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
August 15, 2024
Submitted 1 Vulnerability
Submitted 1 Vulnerability
July 3, 2024

Showing 1-20 of 171 Vulnerabilities

Title CVE ID CVSS Vector Date
Tumult Hype Animations <= 1.9.15 - Authenticated (Author+) Arbitrary File Upload via hypeanimations_panel Function CVE-2024-11082 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H November 27, 2024
AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload CVE-2024-10392 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 30, 2024
HQ Rental Software <= 1.5.29 - Cross-Site Request Forgery to Arbitrary Options Update CVE-2024-11689 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H December 11, 2024
AI Quiz | Quiz Maker <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update CVE-2024-11323 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 5, 2024
Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update CVE-2024-11194 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H November 18, 2024
WooCommerce Report <= 1.5.1 - Cross-Site Request Forgery to Arbitrary Options Update CVE-2024-10711 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H November 4, 2024
Stream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options Update CVE-2024-7423 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H September 12, 2024
MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update CVE-2024-7492 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H August 7, 2024
Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.1 - Cross-Site Request Forgery to Limited Arbitrary Options Update CVE-2024-11601 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H November 21, 2024
Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update CVE-2024-11104 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H November 21, 2024
Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting CVE-2024-8981 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L September 30, 2024
Memberful – Membership Plugin <= 1.73.7 - Authenticated (contributor+) Stored Cross-Site Scripting CVE-2024-9242 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 3, 2024
Advanced Sermons <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-7599 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N September 5, 2024
Dynamic Featured Image <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dfiFeatured Parameter CVE-2024-6929 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N September 4, 2024
Stock Ticker <= 3.24.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock_ticker Shortcode CVE-2024-6363 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N June 28, 2024
Filestack Official <= 2.0.0 - Reflected Cross-Site Scripting CVE-2024-11462 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 13, 2024
Import Eventbrite Events <= 1.7.4 - Reflected Cross-Site Scripting CVE-2024-12422 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 13, 2024
WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More <= 2.5.4 - Reflected Cross-Site Scripting CVE-2024-12411 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 13, 2024
Primer MyData for Woocommerce <= 4.2.1 - Reflected Cross-Site Scripting CVE-2024-11809 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 12, 2024
MyParcel <= 4.24.1 - Reflected Cross-Site Scripting CVE-2024-9608 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 12, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation