Wordfence Intelligence   >   Vulnerability Researchers   >   Dave Jong

Dave Jong

Organization: Patchstack

12
All Time Ranking
184
All Time Discoveries

Showing 1-20 of 184 Vulnerabilities

LoginPress Pro <= 2.5.3 - Missing Authorization to License Status Update
5.3
CVE-2024-32677
Apr 17, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
LoginPress Pro <= 2.5.3 - Captcha Bypass
5.3
CVE-2024-32676
Apr 17, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2024-32553
Apr 16, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Zynith SEO <= 7.4.9 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2024-32562
Apr 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2024-32137
Apr 12, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Citadela Listing <= 5.18.1 - Cross-Site Request Forgery
4.3
CVE-2024-32085
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Citadela Listing <= 5.18.1 - Unauthenticated Sensitive Information Exposure
7.5
CVE-2024-32086
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Post Type Builder <= 2.0.8 - Reflected Cross-Site Scripting
6.1
CVE-2024-31365
Apr 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Post Type Builder <= 2.0.8 - Missing Authorization to Arbitrary Post/Page Creation
4.3
CVE-2024-31366
Apr 9, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Update
5.3
CVE-2024-31244
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Demo My WordPress <= 1.0.9.1 - Unauthenticated Privilege Escalation
9.8
CVE-2024-31290
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Deletion
5.3
CVE-2024-31243
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated Arbitrary Email Sending
5.3
CVE-2024-31242
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Wholesale For WooCommerce <= 2.3.0 - Unauthenticated Arbitrary Post Deletion
5.8
CVE-2024-31297
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
YITH WooCommerce Account Funds Premium <= 1.33.0 - Missing Authorization
4.3
CVE-2024-30470
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Wholesale For WooCommerce <= 2.3.0 - Unauthenticated Information Exposure
5.3
CVE-2024-30469
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
WooThumbs for WooCommerce by Iconic <= 5.5.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-29116
Mar 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WooCommerce License Manager <= 5.3.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-29121
Mar 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Media folder <= 5.7.2 - Authenticated (Subscriber+) Arbitrary File Upload
8.8
CVE-2024-25909
Feb 15, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WooCommerce Easy Checkout Field Editor, Fees & Discounts <= 3.5.12 - Unauthenticated Arbitrary File Upload
9.8
CVE-2024-25925
Feb 14, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
LoginPress Pro <= 2.5.3 - Missing Authorization to License Status Update CVE-2024-32677 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 17, 2024
LoginPress Pro <= 2.5.3 - Captcha Bypass CVE-2024-32676 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 17, 2024
WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-32553 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 16, 2024
Zynith SEO <= 7.4.9 - Unauthenticated Stored Cross-Site Scripting CVE-2024-32562 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N April 16, 2024
User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection CVE-2024-32137 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 12, 2024
Citadela Listing <= 5.18.1 - Cross-Site Request Forgery CVE-2024-32085 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
Citadela Listing <= 5.18.1 - Unauthenticated Sensitive Information Exposure CVE-2024-32086 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N April 11, 2024
Post Type Builder <= 2.0.8 - Reflected Cross-Site Scripting CVE-2024-31365 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 9, 2024
Post Type Builder <= 2.0.8 - Missing Authorization to Arbitrary Post/Page Creation CVE-2024-31366 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 9, 2024
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Update CVE-2024-31244 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 5, 2024
Demo My WordPress <= 1.0.9.1 - Unauthenticated Privilege Escalation CVE-2024-31290 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 5, 2024
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Deletion CVE-2024-31243 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L April 5, 2024
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated Arbitrary Email Sending CVE-2024-31242 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 5, 2024
Wholesale For WooCommerce <= 2.3.0 - Unauthenticated Arbitrary Post Deletion CVE-2024-31297 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L April 5, 2024
YITH WooCommerce Account Funds Premium <= 1.33.0 - Missing Authorization CVE-2024-30470 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N March 28, 2024
Wholesale For WooCommerce <= 2.3.0 - Unauthenticated Information Exposure CVE-2024-30469 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N March 28, 2024
WooThumbs for WooCommerce by Iconic <= 5.5.3 - Reflected Cross-Site Scripting CVE-2024-29116 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 16, 2024
WooCommerce License Manager <= 5.3.1 - Reflected Cross-Site Scripting CVE-2024-29121 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 16, 2024
WP Media folder <= 5.7.2 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2024-25909 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H February 15, 2024
WooCommerce Easy Checkout Field Editor, Fees & Discounts <= 3.5.12 - Unauthenticated Arbitrary File Upload CVE-2024-25925 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 14, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation