Wordfence Intelligence   >   Vulnerability Researchers   >   Dhabaleshwar Das

Dhabaleshwar Das

221
All Time Ranking
12
All Time Discoveries
1
90 Day Published Submissions
8 Jan '25
Last Published Submission

About

I fell in love with security when I realized I could hack stuff and call it a career. Now, I spend my days battling bugs, breaking apps, and convincing developers I’m actually helping. Let's keep the internet safe—or at least entertained!

1 Achievement

Learn more about Achievements
Submitted 1 Vulnerability
Submitted 1 Vulnerability
January 8, 2025
Learn more Learn more about Achievements

12 Vulnerabilities

AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.3 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2024-12605
Jan 8, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Wand <= 1.2.5 - Missing Authorization
5.3
CVE-2025-22302
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AI for SEO <= 1.2.9 - Missing Authorization
5.3
CVE-2025-22299
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Hive Support – WordPress Help Desk <= 1.1.6 - Missing Authorization
4.3
CVE-2025-22298
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WP Visitor Statistics (Real Time Traffic) <= 7.3 - Missing Authorization
4.3
CVE-2025-22304
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
AI WP Writer <= 3.8.4.4 - Cross-Site Request Forgery
4.3
CVE-2025-22297
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
PixelYourSite – Your smart PIXEL (TAG) Manager <= 10.0.1.2 - Cross-Site Request Forgery
4.3
CVE-2025-22300
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Mailster <= 1.8.17.0 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2025-22303
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Event Espresso 4 Decaf <= 5.0.28.decaf - Cross-Site Request Forgery
4.3
CVE-2024-56251
Dec 30, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot <= 1.6.2 - Cross-Site Request Forgery via update_integration_option
4.3
CVE-2024-54306
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Mailster <= 1.8.17.0 - Cross-Site Request Forgery
4.3
CVE-2024-54355
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AIcomments <= 1.4.1 - Cross-Site Request Forgery
4.3
CVE-2024-54307
Dec 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.3 - Cross-Site Request Forgery to Settings Update CVE-2024-12605 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 8, 2025
WP Wand <= 1.2.5 - Missing Authorization CVE-2025-22302 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N January 6, 2025
AI for SEO <= 1.2.9 - Missing Authorization CVE-2025-22299 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N January 6, 2025
Hive Support – WordPress Help Desk <= 1.1.6 - Missing Authorization CVE-2025-22298 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 6, 2025
WP Visitor Statistics (Real Time Traffic) <= 7.3 - Missing Authorization CVE-2025-22304 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 6, 2025
AI WP Writer <= 3.8.4.4 - Cross-Site Request Forgery CVE-2025-22297 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 6, 2025
PixelYourSite – Your smart PIXEL (TAG) Manager <= 10.0.1.2 - Cross-Site Request Forgery CVE-2025-22300 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 6, 2025
WP Mailster <= 1.8.17.0 - Unauthenticated Sensitive Information Exposure CVE-2025-22303 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N January 6, 2025
Event Espresso 4 Decaf <= 5.0.28.decaf - Cross-Site Request Forgery CVE-2024-56251 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 30, 2024
AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot <= 1.6.2 - Cross-Site Request Forgery via update_integration_option CVE-2024-54306 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 11, 2024
WP Mailster <= 1.8.17.0 - Cross-Site Request Forgery CVE-2024-54355 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 11, 2024
AIcomments <= 1.4.1 - Cross-Site Request Forgery CVE-2024-54307 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 11, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation