Wordfence Intelligence   >   Vulnerability Researchers   >   Dave Jong

Dave Jong

Organization: Patchstack

12
All Time Ranking
184
All Time Discoveries

Showing 161-180 of 184 Vulnerabilities

Educenter <= 1.5.7 - Missing Authorization via activate_plugin
4.3
CVE-2023-30480
Apr 14, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Square <= 2.0.0 - Missing Authorization via activate_plugin
4.3
CVE-2023-30486
Apr 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Viral Mag <= 1.0.9 - Missing Authorization to Arbitrary Plugin Activation
4.3
CVE-2023-28990
Mar 30, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Real Estate Directory <= 1.0.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation
4.3
CVE-2023-28532
Mar 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Chankhe <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation
4.3
CVE-2023-28416
Mar 16, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Big Store <= 1.9.3 - Cross-Site Request Forgery to Arbitrary Plugin Activation
4.3
CVE-2023-27431
Mar 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Total Theme <= 2.1.19 - Authenticated(Subscriber+) Plugin Activation
4.3
CVE-2023-27456
Mar 1, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Wholesale Suite <= 2.1.5 - Missing Authorization to Plugin Settings Change
4.3
CVE-2022-34344
Feb 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
GamiPress <= 2.5.6 - Cross-Site Request Forgery to User Earnings Deletion
4.3
CVE-2023-25697
Feb 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
GamiPress <= 2.5.6 - Missing Authorization to User Points Updates
4.3
CVE-2023-25715
Feb 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
ColorWay <= 4.2.3 - Cross Site Request Forgery
4.3
CVE-2023-25447
Feb 8, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Magazine Edge <= 1.13 - Authenticated (Subscriber+) Arbitrary Plugin Activation
4.3
CVE-2023-25068
Feb 2, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
MainWP Comments Extension <= 4.0.6 - Missing Authorization
4.3
CVE-2023-23663
Jan 18, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
MainWP Matomo Extension <= 4.0.4 - Cross-Site Request Forgery
4.3
CVE-2023-23659
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Betheme <= 26.6.2 - Missing Authorization to Theme Settings Update
4.3
CVE-2022-45352
Nov 21, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Betheme <= 26.6.2 - Missing Authorization to Post Title Change
4.3
CVE-2022-45349
Nov 21, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Betheme <= 26.6.2 - Missing Authorization to Post Status Change
4.3
CVE-2022-45351
Nov 21, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Betheme <= 26.6.2 - Missing Authorization Checks to Private Page/Post Data Disclosure
4.3
CVE-2022-45353
Nov 21, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WPML <= 4.5.10 - Missing Authorization to Translation Job Status Change
4.3
CVE-2022-38974
Nov 9, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WPML <= 4.5.13 - Cross-Site Request Forgery
4.3
CVE-2022-45071
Nov 9, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Educenter <= 1.5.7 - Missing Authorization via activate_plugin CVE-2023-30480 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 14, 2023
Square <= 2.0.0 - Missing Authorization via activate_plugin CVE-2023-30486 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 13, 2023
Viral Mag <= 1.0.9 - Missing Authorization to Arbitrary Plugin Activation CVE-2023-28990 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N March 30, 2023
Real Estate Directory <= 1.0.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation CVE-2023-28532 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N March 17, 2023
Chankhe <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation CVE-2023-28416 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N March 16, 2023
Big Store <= 1.9.3 - Cross-Site Request Forgery to Arbitrary Plugin Activation CVE-2023-27431 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 5, 2023
Total Theme <= 2.1.19 - Authenticated(Subscriber+) Plugin Activation CVE-2023-27456 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N March 1, 2023
Wholesale Suite <= 2.1.5 - Missing Authorization to Plugin Settings Change CVE-2022-34344 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N February 27, 2023
GamiPress <= 2.5.6 - Cross-Site Request Forgery to User Earnings Deletion CVE-2023-25697 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 14, 2023
GamiPress <= 2.5.6 - Missing Authorization to User Points Updates CVE-2023-25715 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N February 13, 2023
ColorWay <= 4.2.3 - Cross Site Request Forgery CVE-2023-25447 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 8, 2023
Magazine Edge <= 1.13 - Authenticated (Subscriber+) Arbitrary Plugin Activation CVE-2023-25068 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N February 2, 2023
MainWP Comments Extension <= 4.0.6 - Missing Authorization CVE-2023-23663 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 18, 2023
MainWP Matomo Extension <= 4.0.4 - Cross-Site Request Forgery CVE-2023-23659 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 17, 2023
Betheme <= 26.6.2 - Missing Authorization to Theme Settings Update CVE-2022-45352 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 21, 2022
Betheme <= 26.6.2 - Missing Authorization to Post Title Change CVE-2022-45349 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 21, 2022
Betheme <= 26.6.2 - Missing Authorization to Post Status Change CVE-2022-45351 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L November 21, 2022
Betheme <= 26.6.2 - Missing Authorization Checks to Private Page/Post Data Disclosure CVE-2022-45353 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N November 21, 2022
WPML <= 4.5.10 - Missing Authorization to Translation Job Status Change CVE-2022-38974 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 9, 2022
WPML <= 4.5.13 - Cross-Site Request Forgery CVE-2022-45071 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 9, 2022

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation