Wordfence Intelligence   >   Vulnerability Researchers   >   Dhabaleshwar Das

Dhabaleshwar Das

33
All Time Ranking
245
All Time Discoveries
0
90 Day Published Submissions
24 Mar '25
Last Published Submission

About

I fell in love with security when I realized I could hack stuff and call it a career. Now, I spend my days battling bugs, breaking apps, and convincing developers I’m actually helping. Let's keep the internet safe—or at least entertained!

2 Achievements

Learn more about Achievements
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
February 17, 2025
Submitted 1 Vulnerability
Submitted 1 Vulnerability
January 8, 2025
Learn more Learn more about Achievements

Showing 1-20 of 245 Vulnerabilities

VikRestaurants Table Reservations and Take-Away <= 1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2025-46251
Apr 22, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Chat2 <= 4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2025-32584
Apr 9, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Events Calendar Plugin – connectDaily <= 1.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2025-32597
Apr 9, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
REVE Chat <= 6.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2025-32559
Apr 9, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CRM WordPress Plugin – RepairBuddy <= 3.8213 - Missing Authorization
4.3
CVE-2025-32277
Apr 4, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Astra Security Suite <= 0.2 - Missing Authorization
5.3
CVE-2025-31774
Apr 1, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Apimo Connector <= 2.6.3.1 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2025-31602
Mar 31, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Appointy Appointment Scheduler <= 4.2.1 - Cross-Site Request Forgery to Settings Change
4.3
CVE-2025-31601
Mar 31, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
DesignO <= 2.2.0 - Cross-Site Request Forgery
4.3
CVE-2025-31600
Mar 31, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Estatebud – Properties & Listings <= 5.5.0 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2024-13710
Mar 24, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
RateMyAgent Official <= 1.4.0 - Cross-Site Request Forgery to API Key Update
4.3
CVE-2025-0801
Feb 27, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
School Management System – SakolaWP <= 1.0.8 - Cross-Site Request Forgery to Exam Setting Manipulation
4.3
CVE-2024-13647
Feb 26, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Mortgage Lead Capture System <= 8.2.11 - Cross-Site Request Forgery to Settings Reset
4.3
CVE-2025-0796
Feb 17, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
SpeedSize Image & Video AI-Optimizer <= 1.5.1 - Cross-Site Request Forgery to Clear Cache
4.3
CVE-2024-13438
Feb 17, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Houzez Property Feed <= 2.4.21 - Cross-Site Request Forgery to Property Feed Export Deletion
4.3
CVE-2025-0808
Feb 11, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2025-22670
Feb 3, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Linear <= 2.8.1 - Cross-Site Request Forgery to Cache Reset
4.3
CVE-2024-13709
Jan 24, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Essential Real Estate <= 5.1.8 - Cross-Site Request Forgery
4.3
CVE-2025-24698
Jan 24, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Automate Hub Free by Sperse.IO <= 1.7.0 - Cross-Site Request Forgery to Activation Status Update
4.3
CVE-2024-13683
Jan 23, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
VikAppointments Services Booking Calendar <= 1.2.16 - Cross-Site Request Forgery
4.3
CVE-2025-22719
Jan 15, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
VikRestaurants Table Reservations and Take-Away <= 1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2025-46251 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 22, 2025
Chat2 <= 4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2025-32584 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 9, 2025
WordPress Events Calendar Plugin – connectDaily <= 1.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2025-32597 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 9, 2025
REVE Chat <= 6.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2025-32559 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 9, 2025
CRM WordPress Plugin – RepairBuddy <= 3.8213 - Missing Authorization CVE-2025-32277 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 4, 2025
Astra Security Suite <= 0.2 - Missing Authorization CVE-2025-31774 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 1, 2025
Apimo Connector <= 2.6.3.1 - Cross-Site Request Forgery to Settings Update CVE-2025-31602 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 31, 2025
Appointy Appointment Scheduler <= 4.2.1 - Cross-Site Request Forgery to Settings Change CVE-2025-31601 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 31, 2025
DesignO <= 2.2.0 - Cross-Site Request Forgery CVE-2025-31600 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 31, 2025
Estatebud – Properties & Listings <= 5.5.0 - Cross-Site Request Forgery to Settings Update CVE-2024-13710 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 24, 2025
RateMyAgent Official <= 1.4.0 - Cross-Site Request Forgery to API Key Update CVE-2025-0801 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 27, 2025
School Management System – SakolaWP <= 1.0.8 - Cross-Site Request Forgery to Exam Setting Manipulation CVE-2024-13647 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 26, 2025
Mortgage Lead Capture System <= 8.2.11 - Cross-Site Request Forgery to Settings Reset CVE-2025-0796 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 17, 2025
SpeedSize Image & Video AI-Optimizer <= 1.5.1 - Cross-Site Request Forgery to Clear Cache CVE-2024-13438 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 17, 2025
Houzez Property Feed <= 2.4.21 - Cross-Site Request Forgery to Property Feed Export Deletion CVE-2025-0808 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 11, 2025
VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Settings Update CVE-2025-22670 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 3, 2025
Linear <= 2.8.1 - Cross-Site Request Forgery to Cache Reset CVE-2024-13709 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 24, 2025
Essential Real Estate <= 5.1.8 - Cross-Site Request Forgery CVE-2025-24698 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 24, 2025
Automate Hub Free by Sperse.IO <= 1.7.0 - Cross-Site Request Forgery to Activation Status Update CVE-2024-13683 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 23, 2025
VikAppointments Services Booking Calendar <= 1.2.16 - Cross-Site Request Forgery CVE-2025-22719 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 15, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation