Wordfence Intelligence   >   Vulnerability Researchers   >   Dave Jong

Dave Jong

Organization: Patchstack

11
All Time Ranking
201
All Time Discoveries

Showing 101-120 of 201 Vulnerabilities

TheGem < 5.8.1.1 - Missing Authorization
6.3
CVE-2023-32238
May 5, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Editorialmag <= 1.2.0 - Missing Authorization to Authenticated Plugin Activation
6.3
CVE-2023-32129
May 4, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
HappyFiles Pro <= 1.8.1 - Missing Authorization to Arbitrary File Deletion
6.3
CVE-2023-25446
Mar 29, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
HappyFiles Pro <= 1.8.1 - Missing Authorization
6.3
CVE-2023-25445
Mar 29, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Piotnet Addons For Elementor Pro <= 7.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-33631
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2024-32553
Apr 16, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Perfmatters < 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2023-47877
Nov 21, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WoodMart <= 7.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2023-32239
May 11, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
TheGem < 5.8.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2023-32237
May 5, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Upfrontwp <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2023-24009
Jan 23, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP Code Snippets Extension <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2023-23650
Jan 18, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP Clone Extension <= 4.0.2 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23642
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP Maintenance Extension <= 4.1.1 - Missing Authorization to Plugin Settings Change
6.4
CVE ID Unknown
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP Google Analytics Extension <= 4.0.4 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23652
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP Wordfence Extension <= 4.0.7 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23669
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP White Label Extension <= 4.1.1 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23748
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP Rocket Extension <= 4.0.3 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23665
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP Boilerplate Extension <= 4.1 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23745
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
MainWP Code Snippets Extension <= 4.0.2 - Missing Authorization to Plugin Settings Change
6.4
CVE-2023-23655
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Wholesale Suite <= 2.1.5 - Authenticated (Subscriber+) Cross-Site Scripting
6.4
CVE-2022-41640
Nov 28, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
TheGem < 5.8.1.1 - Missing Authorization CVE-2023-32238 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L May 5, 2023
Editorialmag <= 1.2.0 - Missing Authorization to Authenticated Plugin Activation CVE-2023-32129 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L May 4, 2023
HappyFiles Pro <= 1.8.1 - Missing Authorization to Arbitrary File Deletion CVE-2023-25446 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L March 29, 2023
HappyFiles Pro <= 1.8.1 - Missing Authorization CVE-2023-25445 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L March 29, 2023
Piotnet Addons For Elementor Pro <= 7.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-33631 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 25, 2024
WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-32553 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 16, 2024
Perfmatters < 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2023-47877 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 21, 2023
WoodMart <= 7.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2023-32239 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N May 11, 2023
TheGem < 5.8.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2023-32237 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N May 5, 2023
Upfrontwp <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2023-24009 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 23, 2023
MainWP Code Snippets Extension <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2023-23650 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 18, 2023
MainWP Clone Extension <= 4.0.2 - Missing Authorization to Plugin Settings Change CVE-2023-23642 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
MainWP Maintenance Extension <= 4.1.1 - Missing Authorization to Plugin Settings Change 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
MainWP Google Analytics Extension <= 4.0.4 - Missing Authorization to Plugin Settings Change CVE-2023-23652 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
MainWP Wordfence Extension <= 4.0.7 - Missing Authorization to Plugin Settings Change CVE-2023-23669 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
MainWP White Label Extension <= 4.1.1 - Missing Authorization to Plugin Settings Change CVE-2023-23748 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
MainWP Rocket Extension <= 4.0.3 - Missing Authorization to Plugin Settings Change CVE-2023-23665 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
MainWP Boilerplate Extension <= 4.1 - Missing Authorization to Plugin Settings Change CVE-2023-23745 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
MainWP Code Snippets Extension <= 4.0.2 - Missing Authorization to Plugin Settings Change CVE-2023-23655 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 17, 2023
Wholesale Suite <= 2.1.5 - Authenticated (Subscriber+) Cross-Site Scripting CVE-2022-41640 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 28, 2022

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation