Wordfence Intelligence   >   Vulnerability Researchers   >   Dhabaleshwar Das

Dhabaleshwar Das

24
All Time Ranking
119
All Time Discoveries

Showing 41-60 of 119 Vulnerabilities

Church Admin <= 4.0.27 - Cross-Site Request Forgery
4.3
CVE-2024-32090
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Church Content – Sermons, Events and More <= 2.6 - Cross-Site Request Forgery to Notice Dismissal
4.3
CVE-2024-32094
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd <= 6.15.20 - Cross-Site Request Forgery to Notice Dismissal
4.3
CVE-2024-32088
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Digital Publications by Supsystic <= 1.7.7 - Cross-Site Request Forgery
4.3
CVE-2024-32089
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Finale Lite <= 2.18.0 - Cross-Site Request Forgery
5.8
CVE-2024-32107
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
MultiParcels Shipping For WooCommerce < 1.16.9 - Cross-Site Request Forgery
4.3
CVE-2024-32095
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Novelist <= 1.2.2 - Cross-Site Request Forgery
4.3
CVE-2024-32093
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Email Marketing for WooCommerce by Omnisend <= 1.14.3 - Cross-Site Request Forgery
4.3
CVE-2024-32101
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Siteimprove <= 2.0.6 - Cross-Site Request Forgery
4.3
CVE-2024-32103
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Mail Catcher <= 2.1.6 - Cross-Site Request Forgery
4.3
CVE-2024-32099
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Migration Plugin DB & Files – WP Synchro <= 1.11.2 - Cross-Site Request Forgery
4.3
CVE-2024-32096
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Inisev Analyst Module <= Various Versions - Missing Authorization
4.3
CVE-2024-31435
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Restrict Content <= 3.2.8 - Missing Authorization
5.3
CVE-2024-31432
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Extra Product Options Builder for WooCommerce <= 1.2.104 - Cross-Site Request Forgery to Notice Dismissal
4.3
CVE-2024-31940
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Blocksy <= 2.0.22 - Cross-Site Request Forgery to Notice Dismissal
4.3
CVE-2024-31382
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
BEAR <= 1.1.4.1 & WOLF <= 1.0.8.1 - Cross-Site Request Forgery to Notice Dismissal
5.3
CVE-2024-31430
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Calendarista Basic Edition <= 3.0.2 - Cross-Site Request Forgery
4.3
CVE-2024-31942
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Multiple Themes (Various Versions) - Cross-Site Request Forgery to Notice Dismissal
4.3
CVE-2024-31386
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Currency per Product for WooCommerce <= 1.6.0 - Cross-Site Request Forgery to Notice Dismissal
4.3
CVE-2024-31920
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Dashboard To-Do List <= 1.3.1 - Cross-Site Request Forgery via ardtdw_widgetupdate()
4.3
CVE-2024-31376
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Church Admin <= 4.0.27 - Cross-Site Request Forgery CVE-2024-32090 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
Church Content – Sermons, Events and More <= 2.6 - Cross-Site Request Forgery to Notice Dismissal CVE-2024-32094 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd <= 6.15.20 - Cross-Site Request Forgery to Notice Dismissal CVE-2024-32088 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
Digital Publications by Supsystic <= 1.7.7 - Cross-Site Request Forgery CVE-2024-32089 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
Finale Lite <= 2.18.0 - Cross-Site Request Forgery CVE-2024-32107 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N April 11, 2024
MultiParcels Shipping For WooCommerce < 1.16.9 - Cross-Site Request Forgery CVE-2024-32095 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
Novelist <= 1.2.2 - Cross-Site Request Forgery CVE-2024-32093 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
Email Marketing for WooCommerce by Omnisend <= 1.14.3 - Cross-Site Request Forgery CVE-2024-32101 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
Siteimprove <= 2.0.6 - Cross-Site Request Forgery CVE-2024-32103 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
WP Mail Catcher <= 2.1.6 - Cross-Site Request Forgery CVE-2024-32099 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
WP Migration Plugin DB & Files – WP Synchro <= 1.11.2 - Cross-Site Request Forgery CVE-2024-32096 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
Inisev Analyst Module <= Various Versions - Missing Authorization CVE-2024-31435 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 10, 2024
Restrict Content <= 3.2.8 - Missing Authorization CVE-2024-31432 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 10, 2024
Extra Product Options Builder for WooCommerce <= 1.2.104 - Cross-Site Request Forgery to Notice Dismissal CVE-2024-31940 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 10, 2024
Blocksy <= 2.0.22 - Cross-Site Request Forgery to Notice Dismissal CVE-2024-31382 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 10, 2024
BEAR <= 1.1.4.1 & WOLF <= 1.0.8.1 - Cross-Site Request Forgery to Notice Dismissal CVE-2024-31430 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 10, 2024
Calendarista Basic Edition <= 3.0.2 - Cross-Site Request Forgery CVE-2024-31942 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 10, 2024
Multiple Themes (Various Versions) - Cross-Site Request Forgery to Notice Dismissal CVE-2024-31386 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 10, 2024
Currency per Product for WooCommerce <= 1.6.0 - Cross-Site Request Forgery to Notice Dismissal CVE-2024-31920 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 10, 2024
Dashboard To-Do List <= 1.3.1 - Cross-Site Request Forgery via ardtdw_widgetupdate() CVE-2024-31376 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 10, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation