Wordfence Intelligence   >   Vulnerability Researchers   >   Dimas Maulana

Dimas Maulana

38
All Time Ranking
82
All Time Discoveries

Showing 41-60 of 82 Vulnerabilities

Add Shortcodes Actions And Filters <= 2.10 - Reflected Cross-Site Scripting
6.1
CVE-2024-30558
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
DX-Watermark <= 1.0.4 - Cross-Site Request Forgery
4.3
CVE-2024-30560
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Change default login logo,url and title <= 2.0 - Cross-Site Request Forgery
4.3
CVE-2024-31086
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Limit Attempts by BestWebSoft <= 1.2.9 - Reflected Cross-Site Scripting
6.1
CVE-2024-30439
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Mang Board WP <= 1.8.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-30431
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Spiffy Calendar <= 4.9.7 - Reflected Cross-Site Scripting
6.1
CVE-2024-30427
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Contest Gallery <= 21.3.5 - Reflected Cross-Site Scripting
6.1
CVE-2024-30428
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Directory Kit <= 1.2.9 - Reflected Cross-Site Scripting
6.1
CVE-2024-29774
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Importer <= 1.0.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-30201
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Survey Maker <= 4.0.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-29918
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-30194
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
SEO Backlink Monitor <= 1.5.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-29907
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Podlove Podcast Publisher <= 4.0.9 - Reflected Cross-Site Scripting
6.1
CVE-2024-29915
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Doneren met Mollie <= 2.10.2 - Unauthenticated Reflected Cross-Site Scripting via search
6.1
CVE-2024-29767
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
BuddyForms <= 2.8.5 - Reflected Cross-Site Scripting via page
6.1
CVE-2024-30198
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Link Whisper Free <= 0.6.8 - Reflected Cross-Site Scripting
6.1
CVE-2024-27992
Mar 15, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Configure SMTP <= 3.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-27192
Feb 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Watermark RELOADED <= 1.3.5 - Cross-Site Request Forgery via optionsPage
8.2
CVE-2024-27195
Feb 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N
Fontific | Google Fonts <= 0.1.6 - Cross-Site Request Forgery via ajax_fontific_save_all
8.2
CVE-2024-27194
Feb 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N
postMash – custom post order <= 1.2.0 - Reflected Cross-Site Scripting via m
6.1
CVE-2024-27196
Feb 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Add Shortcodes Actions And Filters <= 2.10 - Reflected Cross-Site Scripting CVE-2024-30558 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
DX-Watermark <= 1.0.4 - Cross-Site Request Forgery CVE-2024-30560 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 29, 2024
Change default login logo,url and title <= 2.0 - Cross-Site Request Forgery CVE-2024-31086 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 29, 2024
Limit Attempts by BestWebSoft <= 1.2.9 - Reflected Cross-Site Scripting CVE-2024-30439 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 28, 2024
Mang Board WP <= 1.8.0 - Reflected Cross-Site Scripting CVE-2024-30431 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 28, 2024
Spiffy Calendar <= 4.9.7 - Reflected Cross-Site Scripting CVE-2024-30427 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 28, 2024
Contest Gallery <= 21.3.5 - Reflected Cross-Site Scripting CVE-2024-30428 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 28, 2024
WP Directory Kit <= 1.2.9 - Reflected Cross-Site Scripting CVE-2024-29774 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
WordPress Importer <= 1.0.4 - Reflected Cross-Site Scripting CVE-2024-30201 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
Survey Maker <= 4.0.6 - Reflected Cross-Site Scripting CVE-2024-29918 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting CVE-2024-30194 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
SEO Backlink Monitor <= 1.5.0 - Reflected Cross-Site Scripting CVE-2024-29907 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
Podlove Podcast Publisher <= 4.0.9 - Reflected Cross-Site Scripting CVE-2024-29915 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
Doneren met Mollie <= 2.10.2 - Unauthenticated Reflected Cross-Site Scripting via search CVE-2024-29767 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
BuddyForms <= 2.8.5 - Reflected Cross-Site Scripting via page CVE-2024-30198 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
Link Whisper Free <= 0.6.8 - Reflected Cross-Site Scripting CVE-2024-27992 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 15, 2024
Configure SMTP <= 3.1 - Reflected Cross-Site Scripting CVE-2024-27192 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 26, 2024
Watermark RELOADED <= 1.3.5 - Cross-Site Request Forgery via optionsPage CVE-2024-27195 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N February 26, 2024
Fontific | Google Fonts <= 0.1.6 - Cross-Site Request Forgery via ajax_fontific_save_all CVE-2024-27194 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N February 26, 2024
postMash – custom post order <= 1.2.0 - Reflected Cross-Site Scripting via m CVE-2024-27196 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 26, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation