Wordfence Intelligence   >   Vulnerability Researchers   >   Dave Jong

Dave Jong

Organization: Patchstack

9
All Time Ranking
232
All Time Discoveries

Showing 1-20 of 232 Vulnerabilities

Uncanny Automator Pro <= 5.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-37117
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
BerqWP <= 1.7.5 - Unauthenticated Server-Side Request Forgery
7.2
CVE-2024-37942
Jul 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Jobmonster <= 4.7.0 - Unauthenticated Arbitrary File Deletion
9.1
CVE-2024-37928
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Jobmonster <= 4.7.0 - Unauthenticated Privilege Escalation
9.8
CVE-2024-37927
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
User Activity Log Pro <= 2.3.4 - Missing Authorization
4.3
CVE-2024-37929
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Woocommerce OpenPos <= 6.4.4 - Missing Authorization to Information Exposure
5.3
CVE-2024-37935
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Woocommerce OpenPos <= 6.4.4 - Unauthenticated SQL Injection
10.0
CVE-2024-37933
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Woocommerce OpenPos <= 6.4.4 - Unauthenticated Arbitrary File Deletion
9.1
CVE-2024-37932
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
BuddyBoss Theme <= 2.4.61 - Cross-Site Request Forgery
4.3
CVE-2024-37925
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Seraphinite Accelerator Premium <= 2.21.13 - Cross-Site Request Forgery to Arbitrary File Deletion
4.3
CVE-2024-37940
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Book Your Travel <= 8.18.17 - Authenticated (Subscriber+) Privilege Escalation
8.8
CVE-2024-37952
Jul 4, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
JetThemeCore for Elementor <= 2.2.0 - Authenticated (Subscriber+) Arbitrary File Deletion
8.1
CVE-2024-37497
Jul 4, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Uncanny Toolkit Pro for LearnDash <= 4.1.4 - Cross-Site Request Forgery
4.3
CVE-2024-37438
Jun 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Uncanny Automator Pro < 5.3.0.1 - Cross-Site Request Forgery to License Setting Reset
4.3
CVE-2024-37118
Jun 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Uncanny Automator Pro < 5.3.0.1 - Missing Authorization to Unauthenticated License Setting Reset
5.3
CVE-2024-37119
Jun 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Uncanny Toolkit Pro for LearnDash <= 4.1.4 - Missing Authorization to Arbitrary Page/Post Duplication
4.3
CVE-2024-37439
Jun 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Uncanny Toolkit Pro for LearnDash <= 4.1.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-37436
Jun 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Hercules Core <= 6.5 - Missing Authorization to Settings Update
5.4
CVE-2024-37232
Jun 21, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
WishList Member X <= 3.25.1 - Unauthenticated Denial of Service
5.3
CVE-2024-37111
Jun 20, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
WishList Member X <= 3.25.1 - Missing Authorization to Information Disclosure
5.3
CVE-2024-37110
Jun 20, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Title CVE ID CVSS Vector Date
Uncanny Automator Pro <= 5.3 - Reflected Cross-Site Scripting CVE-2024-37117 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 11, 2024
BerqWP <= 1.7.5 - Unauthenticated Server-Side Request Forgery CVE-2024-37942 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N July 10, 2024
Jobmonster <= 4.7.0 - Unauthenticated Arbitrary File Deletion CVE-2024-37928 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H July 9, 2024
Jobmonster <= 4.7.0 - Unauthenticated Privilege Escalation CVE-2024-37927 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 9, 2024
User Activity Log Pro <= 2.3.4 - Missing Authorization CVE-2024-37929 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N July 9, 2024
Woocommerce OpenPos <= 6.4.4 - Missing Authorization to Information Exposure CVE-2024-37935 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 9, 2024
Woocommerce OpenPos <= 6.4.4 - Unauthenticated SQL Injection CVE-2024-37933 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 9, 2024
Woocommerce OpenPos <= 6.4.4 - Unauthenticated Arbitrary File Deletion CVE-2024-37932 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H July 9, 2024
BuddyBoss Theme <= 2.4.61 - Cross-Site Request Forgery CVE-2024-37925 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 9, 2024
Seraphinite Accelerator Premium <= 2.21.13 - Cross-Site Request Forgery to Arbitrary File Deletion CVE-2024-37940 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 9, 2024
Book Your Travel <= 8.18.17 - Authenticated (Subscriber+) Privilege Escalation CVE-2024-37952 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H July 4, 2024
JetThemeCore for Elementor <= 2.2.0 - Authenticated (Subscriber+) Arbitrary File Deletion CVE-2024-37497 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H July 4, 2024
Uncanny Toolkit Pro for LearnDash <= 4.1.4 - Cross-Site Request Forgery CVE-2024-37438 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 28, 2024
Uncanny Automator Pro < 5.3.0.1 - Cross-Site Request Forgery to License Setting Reset CVE-2024-37118 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 28, 2024
Uncanny Automator Pro < 5.3.0.1 - Missing Authorization to Unauthenticated License Setting Reset CVE-2024-37119 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N June 28, 2024
Uncanny Toolkit Pro for LearnDash <= 4.1.4 - Missing Authorization to Arbitrary Page/Post Duplication CVE-2024-37439 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 28, 2024
Uncanny Toolkit Pro for LearnDash <= 4.1.4 - Reflected Cross-Site Scripting CVE-2024-37436 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 28, 2024
Hercules Core <= 6.5 - Missing Authorization to Settings Update CVE-2024-37232 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N June 21, 2024
WishList Member X <= 3.25.1 - Unauthenticated Denial of Service CVE-2024-37111 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L June 20, 2024
WishList Member X <= 3.25.1 - Missing Authorization to Information Disclosure CVE-2024-37110 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N June 20, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation