Wordfence Intelligence   >   Vulnerability Researchers   >   emad

emad

53
All Time Ranking
59
All Time Discoveries

1 Achievement

Learn more about Achievements
Submitted 1 Vulnerability
Submitted 1 Vulnerability
December 5, 2023
Learn more Learn more about Achievements

Showing 21-40 of 59 Vulnerabilities

WP Review Slider <= 12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-51685
Dec 27, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
weForms <= 1.6.18 - Missing Authorization via export_form_entries
6.5
CVE-2023-51524
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
WP Chat App <= 3.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-51370
Dec 26, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Sticky Chat Widget <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-51361
Dec 26, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
HashBar – WordPress Notification Bar <= 1.4.1 - Authenticated (Author+) Stored Cross-Site Scripting
6.4
CVE-2023-51372
Dec 26, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Rise Blocks – A Complete Gutenberg Page Builder <= 3.1 - Cross-Site Request Forgery
4.3
CVE-2023-51378
Dec 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.17 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2023-50896
Dec 26, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Accredible Certificates & Open Badges <= 1.4.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
4.4
CVE-2023-50827
Dec 19, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Menu Image, Icons made easy <= 3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
4.4
CVE-2023-50826
Dec 19, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Ultimate Dashboard <= 3.7.11 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
4.4
CVE-2023-50828
Dec 19, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Rocket Maintenance Mode & Coming Soon Page <= 4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-49842
Dec 6, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Tutor LMS <= 2.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-49829
Dec 5, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2023-6446
Dec 5, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Guest Author <= 2.3 - Authenticated (Author+) Stored Cross-Site Scripting
6.4
CVE-2023-49747
Dec 4, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Nested Pages <= 3.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-49195
Dec 1, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Parallax Slider Block <= 1.2.5 - Authenticated (Author+) Stored Cross-Site Scripting
6.4
CVE-2023-49184
Nov 29, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
KP Fastest Tawk.to Chat <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-49175
Nov 29, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Client Dash <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
5.5
CVE-2023-49165
Nov 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Responsive Lightbox <= 2.4.5 - Authenticated (Author+) Stored Cross-Site Scripting via name
6.4
CVE-2023-49174
Nov 29, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Site Offline <= 1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-49190
Nov 29, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
WP Review Slider <= 12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-51685 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N December 27, 2023
weForms <= 1.6.18 - Missing Authorization via export_form_entries CVE-2023-51524 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N December 27, 2023
WP Chat App <= 3.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-51370 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N December 26, 2023
Sticky Chat Widget <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-51361 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N December 26, 2023
HashBar – WordPress Notification Bar <= 1.4.1 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2023-51372 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 26, 2023
Rise Blocks – A Complete Gutenberg Page Builder <= 3.1 - Cross-Site Request Forgery CVE-2023-51378 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 26, 2023
weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.17 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-50896 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N December 26, 2023
Accredible Certificates & Open Badges <= 1.4.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings CVE-2023-50827 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N December 19, 2023
Menu Image, Icons made easy <= 3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings CVE-2023-50826 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N December 19, 2023
Ultimate Dashboard <= 3.7.11 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings CVE-2023-50828 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N December 19, 2023
Rocket Maintenance Mode & Coming Soon Page <= 4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-49842 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N December 6, 2023
Tutor LMS <= 2.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-49829 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N December 5, 2023
Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-6446 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N December 5, 2023
Guest Author <= 2.3 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2023-49747 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 4, 2023
Nested Pages <= 3.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-49195 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N December 1, 2023
Parallax Slider Block <= 1.2.5 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2023-49184 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 29, 2023
KP Fastest Tawk.to Chat <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-49175 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N November 29, 2023
Client Dash <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings CVE-2023-49165 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N November 29, 2023
Responsive Lightbox <= 2.4.5 - Authenticated (Author+) Stored Cross-Site Scripting via name CVE-2023-49174 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 29, 2023
Site Offline <= 1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-49190 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N November 29, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation