Wordfence Intelligence   >   Vulnerability Researchers   >   Jerome Bruandet

Jerome Bruandet

Organization: NinTechNet

10
All Time Ranking
212
All Time Discoveries

Showing 201-212 of 212 Vulnerabilities

Woody Ad Snippets <= 2.2.4 - Missing Authorization to Settings Import
8.8
CVE-2019-15858
Aug 2, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ND Shortcodes <= 5.9.1 - Unauthenticated WordPress Options Update
6.1
CVE-2019-15771
Jul 31, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Contact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injection
7.2
CVE-2019-25145
Jul 27, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Coming Soon Page & Maintenance Mode <= 1.8.1 - Unauthenticated Settings Reset
6.5
CVE-2019-25139
Jul 17, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Coming Soon Page & Maintenance Mode <= 1.8.1 - Stored Cross Site Scripting
7.2
CVE-2019-25140
Jul 16, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Ocean Extra <= 1.5.7 - Unauthenticated Options update and CSS injection
7.5
CVE-2019-16250
Jul 3, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link
7.2
CVE-2019-25147
Jun 19, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Crelly Slider <= 1.3.4 - Arbitrary File Upload
8.8
CVE-2019-15866
Jun 6, 2019
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload
9.8
CVE-2019-25138
May 2, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update
9.8
CVE-2019-25141
Mar 17, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
LearnDash LMS <= 2.5.3 - Arbitrary File Upload
7.5
CVE-2018-25019
Jan 6, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Delete All Comments <= 2.0 - Arbitrary File Upload
9.8
CVE-2016-15033
Dec 10, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Woody Ad Snippets <= 2.2.4 - Missing Authorization to Settings Import CVE-2019-15858 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H August 2, 2019
ND Shortcodes <= 5.9.1 - Unauthenticated WordPress Options Update CVE-2019-15771 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 31, 2019
Contact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injection CVE-2019-25145 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N July 27, 2019
Coming Soon Page & Maintenance Mode <= 1.8.1 - Unauthenticated Settings Reset CVE-2019-25139 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L July 17, 2019
Coming Soon Page & Maintenance Mode <= 1.8.1 - Stored Cross Site Scripting CVE-2019-25140 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N July 16, 2019
Ocean Extra <= 1.5.7 - Unauthenticated Options update and CSS injection CVE-2019-16250 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N July 3, 2019
Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link CVE-2019-25147 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N June 19, 2019
Crelly Slider <= 1.3.4 - Arbitrary File Upload CVE-2019-15866 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H June 6, 2019
User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload CVE-2019-25138 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 2, 2019
Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update CVE-2019-25141 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 17, 2019
LearnDash LMS <= 2.5.3 - Arbitrary File Upload CVE-2018-25019 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N January 6, 2018
Delete All Comments <= 2.0 - Arbitrary File Upload CVE-2016-15033 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 10, 2016

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation