Wordfence Intelligence   >   Vulnerability Researchers   >   Friday

Friday

236
All Time Ranking
8
All Time Discoveries

8 Vulnerabilities

WP Social Comments <= 1.7.3 - Missing Authorization via wpfc_allow_comments()
4.3
CVE-2024-32689
Apr 17, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Mega Addons For Elementor <= 1.8 - Missing Authorization
4.3
CVE-2024-32515
Apr 15, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Sumo <= 1.34 - Cross-Site Request Forgery
4.3
CVE-2024-31265
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
RT Easy Builder – Advanced addons for Elementor <= 2.0 - Missing Authorization
5.3
CVE-2024-30484
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
FG Drupal to WordPress <= 3.67.0 - Cross-Site Request Forgery via ajax_importer
4.3
CVE-2024-24837
Feb 2, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Void Contact Form 7 Widget For Elementor Page Builder <= 2.3 - Missing Authorization
4.3
CVE-2023-52214
Jan 3, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Easyship WooCommerce Shipping Rates <= 0.8.9 - Missing Authorization via multiple AJAX actions
5.4
CVE-2023-37989
Jul 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Product Category Tree <= 2.5 - Missing Authorization
5.3
CVE-2023-29173
Jul 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
WP Social Comments <= 1.7.3 - Missing Authorization via wpfc_allow_comments() CVE-2024-32689 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 17, 2024
Mega Addons For Elementor <= 1.8 - Missing Authorization CVE-2024-32515 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 15, 2024
Sumo <= 1.34 - Cross-Site Request Forgery CVE-2024-31265 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 5, 2024
RT Easy Builder – Advanced addons for Elementor <= 2.0 - Missing Authorization CVE-2024-30484 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 28, 2024
FG Drupal to WordPress <= 3.67.0 - Cross-Site Request Forgery via ajax_importer CVE-2024-24837 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 2, 2024
Void Contact Form 7 Widget For Elementor Page Builder <= 2.3 - Missing Authorization CVE-2023-52214 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 3, 2024
Easyship WooCommerce Shipping Rates <= 0.8.9 - Missing Authorization via multiple AJAX actions CVE-2023-37989 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L July 17, 2023
Product Category Tree <= 2.5 - Missing Authorization CVE-2023-29173 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N July 5, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation