Wordfence Intelligence   >   Vulnerability Researchers   >   Jerome Bruandet

Jerome Bruandet

Organization: NinTechNet

10
All Time Ranking
212
All Time Discoveries

Showing 101-120 of 212 Vulnerabilities

Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting
6.4
CVE-2021-4367
Mar 16, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2021-4378
Jan 12, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Avada <= 6.2.2 - Authenticated (Contributor+) Cross-Site Scripting
6.4
CVE-2020-36711
Apr 24, 2020
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Elementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scripting
6.4
CVE-2020-36703
Apr 21, 2020
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Fruitful < 3.8.2 - Stored Cross-Site Scripting
6.4
CVE-2020-36704
Mar 13, 2020
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
GDPR Cookie Consent & Compliance Notice <= 1.8.2 - Authenticated Stored Cross-Site Scripting and Authorization Bypass
6.4
CVE-2020-20633
Feb 11, 2020
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
PWA for WP & AMP < = 1.7.32 - Missing Authorization
6.3
CVE-2021-4366
Jul 1, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
WP Quick FrontEnd Editor <= 5.5 - Reflected Cross-Site Scripting
6.1
CVE-2021-4363
Jan 12, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP GDPR <= 2.1.1 - Unauthenticated Stored Cross-Site Scripting
6.1
CVE-2020-20628
Apr 23, 2020
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
IgniteUp – Coming Soon and Maintenance Mode <= 3.4 - Stored Cross-Site Scripting
6.1
CVE-2019-17236
Nov 10, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP HTML Mail < 2.9.1 - HTML Injection
6.1
CVE-2019-25148
Oct 25, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Download Plugins and Themes from Dashboard <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting
6.1
CVE-2019-17239
Oct 2, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Motors – Car Dealer, Classifieds & Listing <= 1.4.0 - Stored Cross-Site Scripting
6.1
CVE-2019-17229
Sep 20, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ultimate FAQ <= 1.8.24 - Cross-Site Scripting
6.1
CVE-2019-17233
Sep 20, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authentication on Option Changes
6.1
CVE-2019-15818
Aug 10, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Login or Logout Menu Item <= 1.1.1 - Unauthenticated Settings Update
6.1
CVE-2019-15820
Aug 7, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ND Learning <= 4.7 - Open Redirect
6.1
CVE-2019-15775
Aug 6, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
Travel Management <= 1.6.1 - Open Redirect
6.1
CVE-2019-15773
Aug 3, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
ND Shortcodes <= 5.9.1 - Unauthenticated WordPress Options Update
6.1
CVE-2019-15771
Jul 31, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Frontend File Manager <= 18.2 - Unauthenticated Post Meta Change
5.8
CVE-2021-4351
Jul 12, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting CVE-2021-4367 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 16, 2021
WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2021-4378 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 12, 2021
Avada <= 6.2.2 - Authenticated (Contributor+) Cross-Site Scripting CVE-2020-36711 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 24, 2020
Elementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scripting CVE-2020-36703 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 21, 2020
Fruitful < 3.8.2 - Stored Cross-Site Scripting CVE-2020-36704 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 13, 2020
GDPR Cookie Consent & Compliance Notice <= 1.8.2 - Authenticated Stored Cross-Site Scripting and Authorization Bypass CVE-2020-20633 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N February 11, 2020
PWA for WP & AMP < = 1.7.32 - Missing Authorization CVE-2021-4366 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L July 1, 2021
WP Quick FrontEnd Editor <= 5.5 - Reflected Cross-Site Scripting CVE-2021-4363 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 12, 2021
WP GDPR <= 2.1.1 - Unauthenticated Stored Cross-Site Scripting CVE-2020-20628 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 23, 2020
IgniteUp – Coming Soon and Maintenance Mode <= 3.4 - Stored Cross-Site Scripting CVE-2019-17236 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 10, 2019
WP HTML Mail < 2.9.1 - HTML Injection CVE-2019-25148 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 25, 2019
Download Plugins and Themes from Dashboard <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting CVE-2019-17239 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 2, 2019
Motors – Car Dealer, Classifieds & Listing <= 1.4.0 - Stored Cross-Site Scripting CVE-2019-17229 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N September 20, 2019
Ultimate FAQ <= 1.8.24 - Cross-Site Scripting CVE-2019-17233 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N September 20, 2019
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authentication on Option Changes CVE-2019-15818 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 10, 2019
Login or Logout Menu Item <= 1.1.1 - Unauthenticated Settings Update CVE-2019-15820 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 7, 2019
ND Learning <= 4.7 - Open Redirect CVE-2019-15775 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L August 6, 2019
Travel Management <= 1.6.1 - Open Redirect CVE-2019-15773 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L August 3, 2019
ND Shortcodes <= 5.9.1 - Unauthenticated WordPress Options Update CVE-2019-15771 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 31, 2019
Frontend File Manager <= 18.2 - Unauthenticated Post Meta Change CVE-2021-4351 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N July 12, 2021

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation