Wordfence Intelligence   >   Vulnerability Researchers   >   Dave Jong

Dave Jong

Organization: Patchstack

12
All Time Ranking
184
All Time Discoveries

Showing 81-100 of 184 Vulnerabilities

MainWP Google Analytics Extension <= 4.0.4 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23652
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP Wordfence Extension <= 4.0.7 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23669
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP White Label Extension <= 4.1.1 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23748
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP Rocket Extension <= 4.0.3 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23665
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP Boilerplate Extension <= 4.1 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23745
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP Code Snippets Extension <= 4.0.2 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23655
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Wholesale Suite <= 2.1.5 - Authenticated (Subscriber+) Cross-Site Scripting
6.4
CVE-2022-41640
Nov 28, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Betheme <= 26.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2022-45363
Nov 21, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Soledad <= 8.2.5 - Authenticated (Subscriber+) Cross-Site Scripting
6.4
CVE-2022-41788
Oct 30, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Shortcodes Ultimate <= 5.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE ID Unknown
Oct 13, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
RealHomes <= 4.0.2 - Missing Authorization
6.3
CVE-2023-37886
Jul 11, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
WPLMS < 4.900 - Cross-Site Request Forgery
6.3
CVE-2023-36690
Jul 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
TheGem < 5.8.1.1 - Improper Authentication
6.3
CVE-2023-32238
May 5, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
TheGem < 5.8.1.1 - Missing Authorization
6.3
CVE-2023-32238
May 5, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Editorialmag <= 1.2.0 - Missing Authorization to Authenticated Plugin Activation
6.3
CVE-2023-32129
May 4, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
HappyFiles Pro <= 1.8.1 - Missing Authorization to Arbitrary File Deletion
6.3
CVE-2023-25446
Mar 29, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
HappyFiles Pro <= 1.8.1 - Missing Authorization
6.3
CVE-2023-25445
Mar 29, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Post Type Builder <= 2.0.8 - Reflected Cross-Site Scripting
6.1
CVE-2024-31365
Apr 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WooCommerce License Manager <= 5.3.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-29121
Mar 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WooThumbs for WooCommerce by Iconic <= 5.5.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-29116
Mar 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
MainWP Google Analytics Extension <= 4.0.4 - Missing Authorization to Plugin Settings Change CVE-2023-23652 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
MainWP Wordfence Extension <= 4.0.7 - Missing Authorization to Plugin Settings Change CVE-2023-23669 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
MainWP White Label Extension <= 4.1.1 - Missing Authorization to Plugin Settings Change CVE-2023-23748 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
MainWP Rocket Extension <= 4.0.3 - Missing Authorization to Plugin Settings Change CVE-2023-23665 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
MainWP Boilerplate Extension <= 4.1 - Missing Authorization to Plugin Settings Change CVE-2023-23745 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
MainWP Code Snippets Extension <= 4.0.2 - Missing Authorization to Plugin Settings Change CVE-2023-23655 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
Wholesale Suite <= 2.1.5 - Authenticated (Subscriber+) Cross-Site Scripting CVE-2022-41640 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 28, 2022
Betheme <= 26.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2022-45363 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 21, 2022
Soledad <= 8.2.5 - Authenticated (Subscriber+) Cross-Site Scripting CVE-2022-41788 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 30, 2022
Shortcodes Ultimate <= 5.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 13, 2022
RealHomes <= 4.0.2 - Missing Authorization CVE-2023-37886 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L July 11, 2023
WPLMS < 4.900 - Cross-Site Request Forgery CVE-2023-36690 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L July 5, 2023
TheGem < 5.8.1.1 - Improper Authentication CVE-2023-32238 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L May 5, 2023
TheGem < 5.8.1.1 - Missing Authorization CVE-2023-32238 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L May 5, 2023
Editorialmag <= 1.2.0 - Missing Authorization to Authenticated Plugin Activation CVE-2023-32129 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L May 4, 2023
HappyFiles Pro <= 1.8.1 - Missing Authorization to Arbitrary File Deletion CVE-2023-25446 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L March 29, 2023
HappyFiles Pro <= 1.8.1 - Missing Authorization CVE-2023-25445 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L March 29, 2023
Post Type Builder <= 2.0.8 - Reflected Cross-Site Scripting CVE-2024-31365 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 9, 2024
WooCommerce License Manager <= 5.3.1 - Reflected Cross-Site Scripting CVE-2024-29121 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 16, 2024
WooThumbs for WooCommerce by Iconic <= 5.5.3 - Reflected Cross-Site Scripting CVE-2024-29116 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 16, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation