Wordfence Intelligence   >   Vulnerability Researchers   >   Daniel Ruf

Daniel Ruf

18
All Time Ranking
130
All Time Discoveries

Showing 1-20 of 130 Vulnerabilities

WordPress Toolbar Plugin <= 2.2.6 - Open Redirect via wptbto
4.3
CVE-2023-6389
Jan 31, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP-Reply Notify <= 1.1 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2023-7195
Jan 23, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Social Bookmark Menu <= 1.2 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2023-7074
Jan 3, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WordPress Users <= 1.4 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2023-6390
Jan 3, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Custom User CSS <= 0.2 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2023-6391
Jan 3, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CommentTweets <= 0.6 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2023-6845
Dec 10, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Blogs' Planetarium <= 1.0 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2023-6532
Nov 13, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Form Block <= 1.0.1 - Cross-Site Request Forgery
4.3
CVE-2023-30616
Apr 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WordPress Ping Optimizer <= 2.35.1.2.3 - Cross-Site Request Forgery
4.3
CVE-2022-1591
Aug 23, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Admin Management Xtended <= 2.4.4 - Cross-Site Request Forgery to Post Status Update
4.3
CVE-2022-1599
Jun 20, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Flexi Quote Rotator <= 0.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2022-2328
Jul 6, 2022
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
User Access Manager <= 2.2.16 - IP Spoofing
5.3
CVE-2022-1601
Aug 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Protect WP Admin <= 3.8 - Unauthenticated Information Disclosure to Protection Bypass
5.3
CVE-2023-3139
Jun 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Formidable Forms <= 6.0.1 - IP Spoofing via HTTP header
5.3
CVE-2023-0816
Mar 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
All-In-One Security <= 5.1.2 - Information Disclosure
5.3
CVE-2022-4346
Dec 9, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Login Block IPs <= 1.0.0 - IP Spoofing to Protection Mechanism Bypass
5.3
CVE-2022-1579
Sep 5, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Site Offline <= 1.4.9 - Maintenance Mode Bypass
5.3
CVE-2022-1580
Aug 29, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Titan Anti Spam & Security <= 7.3.0 - IP Spoofing to Protection Bypass
5.3
CVE-2022-2877
Aug 17, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Login No Captcha reCAPTCHA <= 1.6.11 - CAPTCHA Bypass via Whitelisted IP Address Spoofing
5.3
CVE-2022-2913
Aug 16, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Stop Spam Comments <= 0.2.1.2 - Protection Mechanism Bypass
5.3
CVE-2022-1663
Aug 8, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
WordPress Toolbar Plugin <= 2.2.6 - Open Redirect via wptbto CVE-2023-6389 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 31, 2024
WP-Reply Notify <= 1.1 - Cross-Site Request Forgery to Settings Update CVE-2023-7195 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 23, 2024
WP Social Bookmark Menu <= 1.2 - Cross-Site Request Forgery to Settings Update CVE-2023-7074 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 3, 2024
WordPress Users <= 1.4 - Cross-Site Request Forgery to Settings Update CVE-2023-6390 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 3, 2024
Custom User CSS <= 0.2 - Cross-Site Request Forgery to Settings Update CVE-2023-6391 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 3, 2024
CommentTweets <= 0.6 - Cross-Site Request Forgery to Settings Update CVE-2023-6845 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 10, 2023
WP Blogs' Planetarium <= 1.0 - Cross-Site Request Forgery to Settings Update CVE-2023-6532 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 13, 2023
Form Block <= 1.0.1 - Cross-Site Request Forgery CVE-2023-30616 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 20, 2023
WordPress Ping Optimizer <= 2.35.1.2.3 - Cross-Site Request Forgery CVE-2022-1591 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 23, 2022
Admin Management Xtended <= 2.4.4 - Cross-Site Request Forgery to Post Status Update CVE-2022-1599 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 20, 2022
Flexi Quote Rotator <= 0.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2022-2328 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N July 6, 2022
User Access Manager <= 2.2.16 - IP Spoofing CVE-2022-1601 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N August 4, 2023
Protect WP Admin <= 3.8 - Unauthenticated Information Disclosure to Protection Bypass CVE-2023-3139 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N June 12, 2023
Formidable Forms <= 6.0.1 - IP Spoofing via HTTP header CVE-2023-0816 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 6, 2023
All-In-One Security <= 5.1.2 - Information Disclosure CVE-2022-4346 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N December 9, 2022
Login Block IPs <= 1.0.0 - IP Spoofing to Protection Mechanism Bypass CVE-2022-1579 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N September 5, 2022
Site Offline <= 1.4.9 - Maintenance Mode Bypass CVE-2022-1580 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N August 29, 2022
Titan Anti Spam & Security <= 7.3.0 - IP Spoofing to Protection Bypass CVE-2022-2877 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 17, 2022
Login No Captcha reCAPTCHA <= 1.6.11 - CAPTCHA Bypass via Whitelisted IP Address Spoofing CVE-2022-2913 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 16, 2022
Stop Spam Comments <= 0.2.1.2 - Protection Mechanism Bypass CVE-2022-1663 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 8, 2022

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation