Wordfence Intelligence   >   Vulnerability Researchers   >   Dave Jong

Dave Jong

Organization: Patchstack

12
All Time Ranking
186
All Time Discoveries

Showing 81-100 of 186 Vulnerabilities

CM Pop-Up banners <= 1.5.10 - Authenticated (Subscriber+) SQL Injection via getStatistics
8.8
CVE-2023-30750
May 3, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Educenter <= 1.5.7 - Missing Authorization via activate_plugin
4.3
CVE-2023-30480
Apr 14, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Square <= 2.0.0 - Missing Authorization via activate_plugin
4.3
CVE-2023-30486
Apr 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Blogger Buzz <= 1.2.4 - Missing Authorization via activate_plugin
5.3
CVE-2023-30476
Apr 13, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Houzez <= 2.8.2 - Unauthenticated SQL Injection
9.8
CVE-2023-29432
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Viral Mag <= 1.0.9 - Missing Authorization to Arbitrary Plugin Activation
4.3
CVE-2023-28990
Mar 30, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
HappyFiles Pro <= 1.8.1 - Missing Authorization to Arbitrary File Deletion
6.3
CVE-2023-25446
Mar 29, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
HappyFiles Pro <= 1.8.1 - Missing Authorization
6.3
CVE-2023-25445
Mar 29, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Resoto <= 1.0.8 - Missing Authorization leading to Authenticated (Subscriber+) Arbitrary Plugin Activation
5.0
CVE-2023-28619
Mar 22, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Real Estate Directory <= 1.0.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation
4.3
CVE-2023-28532
Mar 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Chankhe <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation
4.3
CVE-2023-28416
Mar 16, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Mediciti Lite <= 1.3.0 - Reflected Cross-Site Scripting
6.1
CVE-2023-28418
Mar 16, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Intrepidity <= 1.5.1 - Cross-Site Request Forgery via mytheme_add_admin
8.8
CVE-2023-27634
Mar 13, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Regina Lite <= 2.0.7 - Reflected Cross-Site Scripting
5.4
CVE-2023-27619
Mar 13, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Brilliance <= 1.3.1 - Reflected Cross-Site Scripting
6.1
CVE-2023-28171
Mar 13, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Big Store <= 1.9.3 - Cross-Site Request Forgery to Arbitrary Plugin Activation
4.3
CVE-2023-27431
Mar 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CSSTidy - Server-Side Request Forgery
8.3
CVE-2022-40700
Mar 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Types <= 3.4.17 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-27440
Mar 3, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Total Theme <= 2.1.19 - Authenticated(Subscriber+) Plugin Activation
4.3
CVE-2023-27456
Mar 1, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Houzez <= 2.7.1 - Privilege Escalation
9.8
CVE-2023-26540
Feb 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
CM Pop-Up banners <= 1.5.10 - Authenticated (Subscriber+) SQL Injection via getStatistics CVE-2023-30750 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H May 3, 2023
Educenter <= 1.5.7 - Missing Authorization via activate_plugin CVE-2023-30480 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 14, 2023
Square <= 2.0.0 - Missing Authorization via activate_plugin CVE-2023-30486 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 13, 2023
Blogger Buzz <= 1.2.4 - Missing Authorization via activate_plugin CVE-2023-30476 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 13, 2023
Houzez <= 2.8.2 - Unauthenticated SQL Injection CVE-2023-29432 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 6, 2023
Viral Mag <= 1.0.9 - Missing Authorization to Arbitrary Plugin Activation CVE-2023-28990 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N March 30, 2023
HappyFiles Pro <= 1.8.1 - Missing Authorization to Arbitrary File Deletion CVE-2023-25446 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L March 29, 2023
HappyFiles Pro <= 1.8.1 - Missing Authorization CVE-2023-25445 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L March 29, 2023
Resoto <= 1.0.8 - Missing Authorization leading to Authenticated (Subscriber+) Arbitrary Plugin Activation CVE-2023-28619 5.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N March 22, 2023
Real Estate Directory <= 1.0.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation CVE-2023-28532 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N March 17, 2023
Chankhe <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation CVE-2023-28416 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N March 16, 2023
Mediciti Lite <= 1.3.0 - Reflected Cross-Site Scripting CVE-2023-28418 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 16, 2023
Intrepidity <= 1.5.1 - Cross-Site Request Forgery via mytheme_add_admin CVE-2023-27634 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H March 13, 2023
Regina Lite <= 2.0.7 - Reflected Cross-Site Scripting CVE-2023-27619 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N March 13, 2023
Brilliance <= 1.3.1 - Reflected Cross-Site Scripting CVE-2023-28171 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 13, 2023
Big Store <= 1.9.3 - Cross-Site Request Forgery to Arbitrary Plugin Activation CVE-2023-27431 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 5, 2023
CSSTidy - Server-Side Request Forgery CVE-2022-40700 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L March 3, 2023
Types <= 3.4.17 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-27440 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 3, 2023
Total Theme <= 2.1.19 - Authenticated(Subscriber+) Plugin Activation CVE-2023-27456 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N March 1, 2023
Houzez <= 2.7.1 - Privilege Escalation CVE-2023-26540 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 27, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation