Wordfence Intelligence   >   Vulnerability Researchers   >   Daniel Ruf

Daniel Ruf

18
All Time Ranking
130
All Time Discoveries

Showing 121-130 of 130 Vulnerabilities

RSFirewall! <= 1.1.24 - IP Address Spoofing
6.5
CVE-2021-4226
Apr 13, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
RSVP and Event Management <= 2.7.7 - Unauthenticated Sensitive Information Disclosure
5.3
CVE-2022-1054
Apr 11, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
FloLaunch <= 2.4 - Missing Authorization
9.8
CVE-2022-0541
Mar 29, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Blackhole for Bad Bots <= 3.3.1 - Arbitrary IP Address Blocking via IP Spoofing
9.1
CVE-2022-1165
Jan 31, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
WPS Hide Login <= 1.9.0 - Hidden Login Page Location Disclosure
5.3
CVE-2021-24917
Oct 27, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Wyzi - Social Directory WordPress Theme <= 2.4.2 - Reflected Cross-Site Scripting
6.1
CVE-2022-1164
Feb 6, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Noo JobMonster <= 4.6.6 - Sensitive Information Disclosure via Directory Listing
5.3
CVE-2022-1166
Sep 11, 2020
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
WP JobSearch < 1.5.1 - Reflected Cross-Site Scripting
7.1
CVE-2022-1168
Jun 3, 2020
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Careerfy < 3.9.0 - Cross-Site Scripting
6.1
CVE-2022-1169
Jun 3, 2020
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Noo JobMonster < 4.5.2.9 - Reflected Cross-Site Scripting
6.1
CVE-2022-1170
Oct 24, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
RSFirewall! <= 1.1.24 - IP Address Spoofing CVE-2021-4226 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N April 13, 2022
RSVP and Event Management <= 2.7.7 - Unauthenticated Sensitive Information Disclosure CVE-2022-1054 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 11, 2022
FloLaunch <= 2.4 - Missing Authorization CVE-2022-0541 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 29, 2022
Blackhole for Bad Bots <= 3.3.1 - Arbitrary IP Address Blocking via IP Spoofing CVE-2022-1165 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H January 31, 2022
WPS Hide Login <= 1.9.0 - Hidden Login Page Location Disclosure CVE-2021-24917 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N October 27, 2021
Wyzi - Social Directory WordPress Theme <= 2.4.2 - Reflected Cross-Site Scripting CVE-2022-1164 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 6, 2021
Noo JobMonster <= 4.6.6 - Sensitive Information Disclosure via Directory Listing CVE-2022-1166 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N September 11, 2020
WP JobSearch < 1.5.1 - Reflected Cross-Site Scripting CVE-2022-1168 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L June 3, 2020
Careerfy < 3.9.0 - Cross-Site Scripting CVE-2022-1169 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 3, 2020
Noo JobMonster < 4.5.2.9 - Reflected Cross-Site Scripting CVE-2022-1170 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 24, 2019

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation