🧹It's time for some spring cleaning! All researchers earn over 6.25x our normal bounty rates, through May 27th, 2024, when Wordfence handles responsible disclosure for our Spring Cleaning Bug Extravaganza! Learn more about our bug bounty program
Register as a researcher and submit your vulnerabilities today!

Wordfence Intelligence > Vulnerability Researchers > Daniel Ruf

Daniel Ruf

All Time Ranking

130

All Time Discoveries

Showing 101-120 of 130 Vulnerabilities

Auto Delete Posts <= 1.3.0 - Cross-Site Request Forgery to Arbitrary Settings Update

8.8

CVE-2022-1779

May 23, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Private Files <= 0.40 - Cross-Site Request Forgery to Disable Protection

8.8

CVE-2022-1793

May 23, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Webriti SMTP Mail <= 1.0 - Cross-Site Request Forgery to options update

8.8

CVE-2022-1612

May 18, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

OnePress Social Locker <= 5.6.2 - Cross-Site Request Forgery to Settings Update

8.8

CVE-2022-1608

May 18, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Latest Tweets Widget <= 1.1.4 - Arbitrary Settings Update via Cross-Site Request Forgery

8.8

CVE-2022-1624

May 18, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Quick Subscribe <= 1.7.1 - Cross-Site Request Forgery to Arbitrary Settings Update and Stored Cross-Site Scripting

8.8

CVE-2022-1792

May 18, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Email Users <= 4.8.8 - Arbitrary Settings Update via Cross-Site Request Forgery

8.8

CVE-2022-1605

May 18, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Useful Banner Manager <= 1.6.1 - Cross-Site Request Forgery

8.8

CVE-2022-1694

May 17, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Throws SPAM Away <= 3.3 - Cross-Site Request Forgery to Comment Modification

8.8

CVE-2022-1709

May 16, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

LiveSync for WordPress <= 1.0 - Cross-Site Request Forgery to Arbitrary Settings Update

8.8

CVE-2022-1712

May 16, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

WP Simple Adsense Insertion <= 2.0 - Cross-Site Request Forgery

8.8

CVE-2022-1695

May 12, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Database Backup for WordPress <= 2.5.1 - Cross-Site Request Forgery to Settings Update

8.8

CVE-2022-1577

May 11, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Bulk Page Creator <= 1.1.3 - Cross-Site Request Forgery to Arbitrary Page Creation

8.8

CVE-2022-1611

May 9, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Blackhole for Bad Bots <= 3.3.1 - Arbitrary IP Address Blocking via IP Spoofing

9.1

CVE-2022-1165

Jan 31, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Site Offline or Coming Soon <= 1.6.6 - Cross-Site Request Forgery to Settings Update and Cross-Site Scripting

9.6

CVE-2022-1593

Jun 6, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Add Post URL <= 2.1.0 - Cross-Site Request Forgery

9.6

CVE-2022-1913

Jun 1, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

New User Approve <= 2.4 - Cross-Site Request Forgery

9.6

CVE-2022-1625

Jun 1, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

OpenBook Book Data <= 3.5.2 - Cross-Site Request Forgery

9.6

CVE-2022-1842

May 31, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

WP-chgFontSize <= 1.8 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting

9.6

CVE-2022-1764

May 23, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

RB Internal Links <= 2.0.16 - Cross-Site Request Forgery to Settings update and Cross-Site Scripting

9.6

CVE-2022-1759

May 23, 2022

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Title	CVE ID	CVSS	Vector	Date
Auto Delete Posts <= 1.3.0 - Cross-Site Request Forgery to Arbitrary Settings Update	CVE-2022-1779	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 23, 2022
Private Files <= 0.40 - Cross-Site Request Forgery to Disable Protection	CVE-2022-1793	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 23, 2022
Webriti SMTP Mail <= 1.0 - Cross-Site Request Forgery to options update	CVE-2022-1612	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 18, 2022
OnePress Social Locker <= 5.6.2 - Cross-Site Request Forgery to Settings Update	CVE-2022-1608	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 18, 2022
Latest Tweets Widget <= 1.1.4 - Arbitrary Settings Update via Cross-Site Request Forgery	CVE-2022-1624	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 18, 2022
Quick Subscribe <= 1.7.1 - Cross-Site Request Forgery to Arbitrary Settings Update and Stored Cross-Site Scripting	CVE-2022-1792	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 18, 2022
Email Users <= 4.8.8 - Arbitrary Settings Update via Cross-Site Request Forgery	CVE-2022-1605	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 18, 2022
Useful Banner Manager <= 1.6.1 - Cross-Site Request Forgery	CVE-2022-1694	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 17, 2022
Throws SPAM Away <= 3.3 - Cross-Site Request Forgery to Comment Modification	CVE-2022-1709	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 16, 2022
LiveSync for WordPress <= 1.0 - Cross-Site Request Forgery to Arbitrary Settings Update	CVE-2022-1712	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 16, 2022
WP Simple Adsense Insertion <= 2.0 - Cross-Site Request Forgery	CVE-2022-1695	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 12, 2022
Database Backup for WordPress <= 2.5.1 - Cross-Site Request Forgery to Settings Update	CVE-2022-1577	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 11, 2022
Bulk Page Creator <= 1.1.3 - Cross-Site Request Forgery to Arbitrary Page Creation	CVE-2022-1611	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	May 9, 2022
Blackhole for Bad Bots <= 3.3.1 - Arbitrary IP Address Blocking via IP Spoofing	CVE-2022-1165	9.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H	January 31, 2022
Site Offline or Coming Soon <= 1.6.6 - Cross-Site Request Forgery to Settings Update and Cross-Site Scripting	CVE-2022-1593	9.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	June 6, 2022
Add Post URL <= 2.1.0 - Cross-Site Request Forgery	CVE-2022-1913	9.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	June 1, 2022
New User Approve <= 2.4 - Cross-Site Request Forgery	CVE-2022-1625	9.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	June 1, 2022
OpenBook Book Data <= 3.5.2 - Cross-Site Request Forgery	CVE-2022-1842	9.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	May 31, 2022
WP-chgFontSize <= 1.8 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting	CVE-2022-1764	9.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	May 23, 2022
RB Internal Links <= 2.0.16 - Cross-Site Request Forgery to Settings update and Cross-Site Scripting	CVE-2022-1759	9.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	May 23, 2022

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation