Wordfence Intelligence   >   Vulnerability Researchers   >   Jerome Bruandet

Jerome Bruandet

Organization: NinTechNet

10
All Time Ranking
212
All Time Discoveries

Showing 181-200 of 212 Vulnerabilities

Lara Google Analytics <= 2.0.4 - Stored Cross-Site Scripting
5.4
CVE-2020-20626
Oct 14, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Download Plugins and Themes from Dashboard <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting
6.1
CVE-2019-17239
Oct 2, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
DELUCKS SEO < 2.1.8 - Stored Cross Site Scripting
7.2
CVE-2019-25146
Sep 21, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated Settings Import/Export
6.5
CVE-2019-17228
Sep 20, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Motors – Car Dealer, Classifieds & Listing <= 1.4.0 - Stored Cross-Site Scripting
6.1
CVE-2019-17229
Sep 20, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ultimate FAQ <= 1.8.24 - Cross-Site Scripting
6.1
CVE-2019-17233
Sep 20, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ultimate FAQ <= 1.8.24 - Unauthenticated Options Import/Export
9.1
CVE-2019-17232
Sep 20, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
LMS by LifterLMS <= 3.35.0 - Stored Cross-Site Scripting via Import
9.8
CVE-2019-15896
Sep 9, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Search Exclude <= 1.2.3 - Arbitrary Settings Change
7.5
CVE-2019-15895
Sep 7, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
WP Private Content Plus <= 1.31 - Unauthenticated Settings Change
7.5
CVE-2019-15816
Aug 27, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Bold Page Builder <= 2.3.1 - Missing Authorization to Settings Update
7.5
CVE-2019-15821
Aug 23, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CformsII <= 15.0.1 - Unauthenticated HTML Injection & Cross-Site Request Forgery
8.8
CVE-2019-15238
Aug 12, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authorization
7.2
CVE-2019-15776
Aug 10, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authentication on Option Changes
6.1
CVE-2019-15818
Aug 10, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ND Restaurant Reservations <= 1.3 - Options Change
9.8
CVE-2019-15819
Aug 9, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Login or Logout Menu Item <= 1.1.1 - Unauthenticated Settings Update
6.1
CVE-2019-15820
Aug 7, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ND Learning <= 4.7 - Open Redirect
6.1
CVE-2019-15775
Aug 6, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
ND Booking <= 2.4 - Unauthenticated Arbitrary Options Update
9.6
CVE-2019-15774
Aug 5, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Donations < 1.4 - Unauthenticated Arbitrary Options Change
8.2
CVE-2019-15772
Aug 3, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L
Travel Management <= 1.6.1 - Open Redirect
6.1
CVE-2019-15773
Aug 3, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
Title CVE ID CVSS Vector Date
Lara Google Analytics <= 2.0.4 - Stored Cross-Site Scripting CVE-2020-20626 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N October 14, 2019
Download Plugins and Themes from Dashboard <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting CVE-2019-17239 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 2, 2019
DELUCKS SEO < 2.1.8 - Stored Cross Site Scripting CVE-2019-25146 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N September 21, 2019
Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated Settings Import/Export CVE-2019-17228 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N September 20, 2019
Motors – Car Dealer, Classifieds & Listing <= 1.4.0 - Stored Cross-Site Scripting CVE-2019-17229 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N September 20, 2019
Ultimate FAQ <= 1.8.24 - Cross-Site Scripting CVE-2019-17233 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N September 20, 2019
Ultimate FAQ <= 1.8.24 - Unauthenticated Options Import/Export CVE-2019-17232 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H September 20, 2019
LMS by LifterLMS <= 3.35.0 - Stored Cross-Site Scripting via Import CVE-2019-15896 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 9, 2019
Search Exclude <= 1.2.3 - Arbitrary Settings Change CVE-2019-15895 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N September 7, 2019
WP Private Content Plus <= 1.31 - Unauthenticated Settings Change CVE-2019-15816 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N August 27, 2019
Bold Page Builder <= 2.3.1 - Missing Authorization to Settings Update CVE-2019-15821 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N August 23, 2019
CformsII <= 15.0.1 - Unauthenticated HTML Injection & Cross-Site Request Forgery CVE-2019-15238 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H August 12, 2019
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authorization CVE-2019-15776 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N August 10, 2019
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authentication on Option Changes CVE-2019-15818 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 10, 2019
ND Restaurant Reservations <= 1.3 - Options Change CVE-2019-15819 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H August 9, 2019
Login or Logout Menu Item <= 1.1.1 - Unauthenticated Settings Update CVE-2019-15820 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 7, 2019
ND Learning <= 4.7 - Open Redirect CVE-2019-15775 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L August 6, 2019
ND Booking <= 2.4 - Unauthenticated Arbitrary Options Update CVE-2019-15774 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H August 5, 2019
Donations < 1.4 - Unauthenticated Arbitrary Options Change CVE-2019-15772 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L August 3, 2019
Travel Management <= 1.6.1 - Open Redirect CVE-2019-15773 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L August 3, 2019

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation