Wordfence Intelligence   >   Vulnerability Researchers   >   Hassan Khan Yusufzai - Splint3r7

Hassan Khan Yusufzai - Splint3r7

100
All Time Ranking
34
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 1-20 of 34 Vulnerabilities

ECT Home Page Products <= 1.9 - Reflected Cross-Site Scripting
6.1
CVE-2024-13225
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
A5 Custom Login Page <= 2.8.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13226
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP MediaTagger <= 4.1.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13112
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CanvasFlow <= 1.5.5 - Reflected Cross-Site Scripting
6.1
CVE-2024-12275
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
SlideDeck 1 Lite Content Slider <= 1.4.8 - Reflected Cross-Site Scripting
6.1
CVE-2024-13224
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Tabulate <= 2.10.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-13223
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Fast Tube <= 2.3.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-13218
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Policy Genius <= 2.0.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-13219
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Google Map Professional <= 1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13220
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Fantastic Elasticsearch <= 4.1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13221
Jan 10, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Clasify Classified Listing <= 1.0.7 - Reflected Cross-Site Scripting
6.1
CVE-2024-12725
Jan 9, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Competition Form <= 2.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-12749
Jan 7, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Custom Field Manager <= 1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-12873
Jan 7, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Dental Optimizer Patient Generator App <= 1.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13052
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Triggers Lite <= 2.5.3 - Reflected Cross-Site Scripting
5.4
CVE-2024-13094
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Dyn Business Panel <= 1.0.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-13055
Jan 6, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Contact Form Master <= 1.0.7 - Reflected Cross-Site Scripting
6.1
CVE-2024-12587
Dec 20, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
BU Section Editing <= 0.9.9 - Reflected Cross-Site Scripting
6.1
CVE-2024-12736
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Backlink Monitoring Manager <= 0.1.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-12714
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Aklamator INfeed <= 2.0.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-12731
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
ECT Home Page Products <= 1.9 - Reflected Cross-Site Scripting CVE-2024-13225 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
A5 Custom Login Page <= 2.8.1 - Reflected Cross-Site Scripting CVE-2024-13226 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
WP MediaTagger <= 4.1.1 - Reflected Cross-Site Scripting CVE-2024-13112 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
CanvasFlow <= 1.5.5 - Reflected Cross-Site Scripting CVE-2024-12275 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
SlideDeck 1 Lite Content Slider <= 1.4.8 - Reflected Cross-Site Scripting CVE-2024-13224 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Tabulate <= 2.10.3 - Reflected Cross-Site Scripting CVE-2024-13223 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Fast Tube <= 2.3.1 - Reflected Cross-Site Scripting CVE-2024-13218 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Policy Genius <= 2.0.4 - Reflected Cross-Site Scripting CVE-2024-13219 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Google Map Professional <= 1.0 - Reflected Cross-Site Scripting CVE-2024-13220 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Fantastic Elasticsearch <= 4.1.0 - Reflected Cross-Site Scripting CVE-2024-13221 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2025
Clasify Classified Listing <= 1.0.7 - Reflected Cross-Site Scripting CVE-2024-12725 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 9, 2025
Competition Form <= 2.0 - Reflected Cross-Site Scripting CVE-2024-12749 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 7, 2025
Custom Field Manager <= 1.0 - Reflected Cross-Site Scripting CVE-2024-12873 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 7, 2025
Dental Optimizer Patient Generator App <= 1.0 - Reflected Cross-Site Scripting CVE-2024-13052 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
WP Triggers Lite <= 2.5.3 - Reflected Cross-Site Scripting CVE-2024-13094 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N January 6, 2025
Dyn Business Panel <= 1.0.0 - Reflected Cross-Site Scripting CVE-2024-13055 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 6, 2025
Contact Form Master <= 1.0.7 - Reflected Cross-Site Scripting CVE-2024-12587 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 20, 2024
BU Section Editing <= 0.9.9 - Reflected Cross-Site Scripting CVE-2024-12736 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 19, 2024
Backlink Monitoring Manager <= 0.1.3 - Reflected Cross-Site Scripting CVE-2024-12714 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 19, 2024
Aklamator INfeed <= 2.0.0 - Reflected Cross-Site Scripting CVE-2024-12731 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 19, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation