Wordfence Intelligence   >   Vulnerability Researchers   >   iohex

iohex

86
All Time Ranking
28
All Time Discoveries

Showing 1-20 of 28 Vulnerabilities

Editorial Calendar <= 3.8.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via edcal_saveoptions AJAX action
6.4
CVE-2022-4115
Jun 5, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
SportsPress <= 2.7.8 - Reflected Cross-Site Scripting
6.1
CVE-2021-24578
Nov 16, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
MF Gig Calendar <= 1.1 - Reflected Cross-Site Scripting
6.1
CVE-2021-24510
Aug 17, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Software License Manager <= 4.4.7 - Reflected Cross-Site Scripting
6.1
CVE-2021-24560
Aug 11, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Titan Framework <= (Various Versions) - Reflected Cross-Site Scripting
6.1
CVE-2021-24435
Aug 9, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Video Posts Webcam Recorder < 3.2.4 - Cross-Site Scripting
6.1
CVE-2021-24512
Jul 14, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Calendar Event Multi View <= 1.3.99 - Reflected Cross-Site Scripting
6.1
CVE-2021-24498
Jul 5, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Community Events <= 1.4.7 - Reflected Cross-Site Scripting
6.1
CVE-2021-24496
Jul 2, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Accordion <= 2.2.29 - Reflected Cross-Site Scripting
6.1
CVE-2021-24283
Apr 21, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Pie Register – User Registration Forms <= 3.7.0.0 - Reflected Cross-Site Scripting
6.1
CVE-2021-24239
Apr 3, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Advanced Booking Calendar <= 1.6.7 - Reflected Cross-Site Scripting
6.1
CVE-2021-24232
Mar 30, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Link Library <= 7.4 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE-2022-4199
Dec 23, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
WP Attachments <= 5.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2022-4330
Dec 21, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Image Optimizer, Resizer and CDN – Sirv <= 6.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2022-4119
Dec 9, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Login with Cognito <= 1.4.8 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE-2022-4200
Dec 7, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
All-in-One Addons for Elementor - WidgetKit <= 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2022-4256
Dec 6, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
WP-Ban <= 1.69 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2022-4260
Dec 6, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
WordPress Filter Gallery Plugin <= 0.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2022-4142
Dec 6, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
WP Google Review Slider <= 11.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2022-4242
Dec 2, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
ImageInject <= 1.18 - Authenticated (Admin+) Stored XSS
5.5
CVE-2022-4243
Dec 2, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Editorial Calendar <= 3.8.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via edcal_saveoptions AJAX action CVE-2022-4115 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N June 5, 2023
SportsPress <= 2.7.8 - Reflected Cross-Site Scripting CVE-2021-24578 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 16, 2021
MF Gig Calendar <= 1.1 - Reflected Cross-Site Scripting CVE-2021-24510 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 17, 2021
Software License Manager <= 4.4.7 - Reflected Cross-Site Scripting CVE-2021-24560 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 11, 2021
Titan Framework <= (Various Versions) - Reflected Cross-Site Scripting CVE-2021-24435 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 9, 2021
Video Posts Webcam Recorder < 3.2.4 - Cross-Site Scripting CVE-2021-24512 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 14, 2021
Calendar Event Multi View <= 1.3.99 - Reflected Cross-Site Scripting CVE-2021-24498 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 5, 2021
Community Events <= 1.4.7 - Reflected Cross-Site Scripting CVE-2021-24496 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 2, 2021
Accordion <= 2.2.29 - Reflected Cross-Site Scripting CVE-2021-24283 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 21, 2021
Pie Register – User Registration Forms <= 3.7.0.0 - Reflected Cross-Site Scripting CVE-2021-24239 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 3, 2021
Advanced Booking Calendar <= 1.6.7 - Reflected Cross-Site Scripting CVE-2021-24232 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 30, 2021
Link Library <= 7.4 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2022-4199 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N December 23, 2022
WP Attachments <= 5.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2022-4330 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N December 21, 2022
Image Optimizer, Resizer and CDN – Sirv <= 6.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2022-4119 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N December 9, 2022
Login with Cognito <= 1.4.8 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2022-4200 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N December 7, 2022
All-in-One Addons for Elementor - WidgetKit <= 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2022-4256 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N December 6, 2022
WP-Ban <= 1.69 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2022-4260 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N December 6, 2022
WordPress Filter Gallery Plugin <= 0.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2022-4142 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N December 6, 2022
WP Google Review Slider <= 11.5 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2022-4242 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N December 2, 2022
ImageInject <= 1.18 - Authenticated (Admin+) Stored XSS CVE-2022-4243 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N December 2, 2022

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation