Wordfence Intelligence   >   Vulnerability Researchers   >   Dhabaleshwar Das

Dhabaleshwar Das

16
All Time Ranking
143
All Time Discoveries

Showing 1-20 of 143 Vulnerabilities

Ads Invalid Click Protection <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-52197
Jan 3, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
WPZOOM Shortcodes <= 1.0.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-22162
Jan 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Beds24 Online Booking <= 2.0.23 - Authenticated(Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-24717
Jan 31, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Location Picker at Checkout for WooCommerce <= 1.8.9 - Missing Authorization via checkout_map_rules_order_ajax_handler
4.3
CVE-2024-24719
Jan 31, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Add Customer for WooCommerce <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-24841
Feb 1, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Admin Menu Editor <= 1.12 - Cross-Site Request Forgery via ajax_hide_hint()
4.3
CVE-2024-24876
Feb 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Contact Form 7 Connector <= 1.2.2 - Cross-Site Request Forgery
4.3
CVE-2024-24884
Feb 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Contest Gallery <= 21.2.8.4 - Cross-Site Request Forgery
4.3
CVE-2024-24887
Feb 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Themify Builder <= 7.0.5 - Cross-Site Request Forgery
4.3
CVE-2024-24872
Feb 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Product Labels For Woocommerce <= 1.5.3 - Authenticated (Shop manager+) Stored Cross-Site Scripting
4.4
CVE-2024-24886
Feb 5, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Link Library <= 7.5.13 - Cross-Site Request Forgery via action_admin_init
4.3
CVE-2024-24875
Feb 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Basic Log Viewer <= 1.0.4 - Cross-Site Request Forgery via wpst_lw_viewer
5.4
CVE-2024-24935
Feb 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Broken Link Checker <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
4.4
CVE-2024-25592
Feb 12, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Doofinder for WooCommerce <= 2.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
4.4
CVE-2024-25596
Feb 12, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Maspik – Spam blacklist <= 0.10.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
4.4
CVE-2024-25101
Feb 12, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Builder for WooCommerce reviews shortcodes – ReviewShort <= 1.01.3 - Cross-Site Request Forgery
4.3
CVE-2024-29093
Mar 15, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Change Email Sender <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-29815
Mar 25, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Woo Viet <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-29816
Mar 25, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Advanced Sermons <= 3.1 - Reflected Cross-Site Scripting via s
6.1
CVE-2024-29928
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Poll Maker <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
4.4
CVE-2024-29818
Mar 25, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Ads Invalid Click Protection <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-52197 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N January 3, 2024
WPZOOM Shortcodes <= 1.0.1 - Reflected Cross-Site Scripting CVE-2024-22162 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2024
Beds24 Online Booking <= 2.0.23 - Authenticated(Administrator+) Stored Cross-Site Scripting CVE-2024-24717 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N January 31, 2024
Location Picker at Checkout for WooCommerce <= 1.8.9 - Missing Authorization via checkout_map_rules_order_ajax_handler CVE-2024-24719 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 31, 2024
Add Customer for WooCommerce <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-24841 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 1, 2024
Admin Menu Editor <= 1.12 - Cross-Site Request Forgery via ajax_hide_hint() CVE-2024-24876 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 5, 2024
Contact Form 7 Connector <= 1.2.2 - Cross-Site Request Forgery CVE-2024-24884 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 5, 2024
Contest Gallery <= 21.2.8.4 - Cross-Site Request Forgery CVE-2024-24887 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 5, 2024
Themify Builder <= 7.0.5 - Cross-Site Request Forgery CVE-2024-24872 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 5, 2024
Product Labels For Woocommerce <= 1.5.3 - Authenticated (Shop manager+) Stored Cross-Site Scripting CVE-2024-24886 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 5, 2024
Link Library <= 7.5.13 - Cross-Site Request Forgery via action_admin_init CVE-2024-24875 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 5, 2024
Basic Log Viewer <= 1.0.4 - Cross-Site Request Forgery via wpst_lw_viewer CVE-2024-24935 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L February 9, 2024
Broken Link Checker <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings CVE-2024-25592 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 12, 2024
Doofinder for WooCommerce <= 2.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings CVE-2024-25596 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 12, 2024
Maspik – Spam blacklist <= 0.10.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings CVE-2024-25101 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 12, 2024
Builder for WooCommerce reviews shortcodes – ReviewShort <= 1.01.3 - Cross-Site Request Forgery CVE-2024-29093 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 15, 2024
WP Change Email Sender <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-29815 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 25, 2024
Woo Viet <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-29816 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 25, 2024
Advanced Sermons <= 3.1 - Reflected Cross-Site Scripting via s CVE-2024-29928 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
WP Poll Maker <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings CVE-2024-29818 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 25, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation