Wordfence Intelligence   >   Vulnerability Researchers   >   dwxsupport

dwxsupport

105
All Time Ranking
23
All Time Discoveries

Showing 1-20 of 23 Vulnerabilities

Tooltipy < 5.1 - Cross-Site Request Forgery
6.5
CVE-2018-1000505
Jun 20, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
WP User Groups <= 2.1.0 - Cross-Site Request Forgery
8.8
CVE ID Unknown
May 11, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Relevanssi <= 3.6.0 - Authenticated (Admin+) SQL Injection
8.7
CVE ID Unknown
Apr 10, 2018
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Content Audit <= 1.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
6.1
CVE-2017-18560
Sep 26, 2017
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Stop User Enumeration <= 1.3.8 - Unauthenticated Username Enumeration
5.3
CVE-2017-1000226
Jan 4, 2017
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Image Slider < 1.1.90 - Arbitrary File Deletion
8.1
CVE ID Unknown
Dec 23, 2016
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
copy-me <= 1.0.0 - Missing Authorization & Cross-Site Request Forgery
5.4
CVE-2016-10938
Dec 21, 2016
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Quiz And Survey Master <= 4.7.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
8.8
CVE-2016-11085
Dec 15, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Private Only <= 3.5.1 - Multiple Cross-Site Request Forgery
8.8
CVE-2015-5483
Aug 26, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
iFrame <= 3.0 - Reflected Cross-Site Scripting
6.1
CVE-2015-6738
Aug 11, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
iFrame <= 4.0 - Stored Cross-Site Scripting
6.4
CVE-2015-6738
Aug 10, 2015
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
BuddyPress Activity Plus <= 1.5 - Cross-Site Request Forgery
8.8
CVE-2015-9455
Jul 14, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Plotly <= 1.0.2 - Stored Cross-Site Scripting
6.4
CVE-2015-9347
Jul 13, 2015
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WooCommerce <= 2.2.2 - Cross-Site Scripting via range Parameter
7.3
CVE-2014-6313
Sep 15, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Improved User Search in Backend <= 1.2.5 - Cross-Site Request Forgery to Cross-Site Scripting
6.1
CVE-2014-5196
Aug 13, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.0.2 - Information Disclosure
5.3
CVE-2014-5337
Jul 24, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Theme My Login <= 6.3.9 - Local File Inclusion
8.8
CVE-2014-5155
Jun 30, 2014
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Twitget <= 3.3.2 - Stored Cross-Site Scripting
5.5
CVE-2014-2995
Apr 11, 2014
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Subscribe To Comments Reloaded <= 140129 - Cross-Site Request Forgery to Cross-Site Scripting
8.8
CVE-2014-2274
Feb 18, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
BP Group Documents <= 1.2 - Stored Cross-Site Scripting
5.5
CVE ID Unknown
Oct 4, 2013
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Tooltipy < 5.1 - Cross-Site Request Forgery CVE-2018-1000505 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N June 20, 2018
WP User Groups <= 2.1.0 - Cross-Site Request Forgery 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H May 11, 2018
Relevanssi <= 3.6.0 - Authenticated (Admin+) SQL Injection 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N April 10, 2018
Content Audit <= 1.9.1 - Cross-Site Request Forgery to Cross-Site Scripting CVE-2017-18560 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N September 26, 2017
Stop User Enumeration <= 1.3.8 - Unauthenticated Username Enumeration CVE-2017-1000226 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N January 4, 2017
Image Slider < 1.1.90 - Arbitrary File Deletion 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H December 23, 2016
copy-me <= 1.0.0 - Missing Authorization & Cross-Site Request Forgery CVE-2016-10938 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N December 21, 2016
Quiz And Survey Master <= 4.7.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2016-11085 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H December 15, 2016
Private Only <= 3.5.1 - Multiple Cross-Site Request Forgery CVE-2015-5483 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H August 26, 2015
iFrame <= 3.0 - Reflected Cross-Site Scripting CVE-2015-6738 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 11, 2015
iFrame <= 4.0 - Stored Cross-Site Scripting CVE-2015-6738 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N August 10, 2015
BuddyPress Activity Plus <= 1.5 - Cross-Site Request Forgery CVE-2015-9455 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H July 14, 2015
Plotly <= 1.0.2 - Stored Cross-Site Scripting CVE-2015-9347 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N July 13, 2015
WooCommerce <= 2.2.2 - Cross-Site Scripting via range Parameter CVE-2014-6313 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L September 15, 2014
Improved User Search in Backend <= 1.2.5 - Cross-Site Request Forgery to Cross-Site Scripting CVE-2014-5196 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 13, 2014
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.0.2 - Information Disclosure CVE-2014-5337 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 24, 2014
Theme My Login <= 6.3.9 - Local File Inclusion CVE-2014-5155 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H June 30, 2014
Twitget <= 3.3.2 - Stored Cross-Site Scripting CVE-2014-2995 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N April 11, 2014
Subscribe To Comments Reloaded <= 140129 - Cross-Site Request Forgery to Cross-Site Scripting CVE-2014-2274 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H February 18, 2014
BP Group Documents <= 1.2 - Stored Cross-Site Scripting 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N October 4, 2013

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation