Wordfence Intelligence   >   Vulnerability Researchers   >   Jerome Bruandet

Jerome Bruandet

Organization: NinTechNet

10
All Time Ranking
212
All Time Discoveries

Showing 1-20 of 212 Vulnerabilities

B2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Information Disclosure
4.3
CVE-2023-3126
Jun 3, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
FlyingPress <= 3.9.6 - Missing Authorization
4.3
CVE-2022-4948
Nov 28, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
JobSearch WP Job Board < = 1.8.1 - Missing Authorization on jobsearch_update_job_import_schedule_call() function
4.3
CVE-2021-4364
Oct 5, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
4.3
CVE-2021-4376
Sep 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Sell Media <= 2.5.5 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4420
Aug 16, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP-Backgrounds Lite <= 2.3 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4419
Aug 16, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Opal Estate <= 1.6.11 - Missing Authorization
4.3
CVE-2021-4388
Aug 16, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Opal Estate <= 1.6.11 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4387
Aug 16, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4386
Aug 16, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WooCommerce Etsy Integration <= 3.3.1 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4409
Aug 16, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
RAYS Grid <= 1.2.2 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4423
Aug 16, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Rucy <= 0.4.4 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4396
Aug 16, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Event Espresso 4 Decaf <= 4.10.11 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4404
Aug 16, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure
4.3
CVE-2021-4375
Aug 6, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WordPress Photo Gallery – Image Gallery <= 1.0.6 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4384
Jul 16, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Amministrazione Trasparente <= 7.1 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4398
Jul 5, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP EasyPay – Square for WordPress <= 3.2.0 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4411
Jul 5, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Slider Hero <= 8.2.0 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4424
Jul 5, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Locations <= 3.2.1 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4394
Jul 5, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Abandoned Cart Recovery for WooCommerce <= 1.0.4 - Cross-Site Request Forgery Bypass
4.3
CVE-2021-4395
Jul 5, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
B2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Information Disclosure CVE-2023-3126 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N June 3, 2023
FlyingPress <= 3.9.6 - Missing Authorization CVE-2022-4948 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 28, 2022
JobSearch WP Job Board < = 1.8.1 - Missing Authorization on jobsearch_update_job_import_schedule_call() function CVE-2021-4364 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N October 5, 2021
WooCommerce Multi Currency <= 2.1.17 - Missing Authorization CVE-2021-4376 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N September 13, 2021
Sell Media <= 2.5.5 - Cross-Site Request Forgery Bypass CVE-2021-4420 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2021
WP-Backgrounds Lite <= 2.3 - Cross-Site Request Forgery Bypass CVE-2021-4419 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2021
Opal Estate <= 1.6.11 - Missing Authorization CVE-2021-4388 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N August 16, 2021
Opal Estate <= 1.6.11 - Cross-Site Request Forgery Bypass CVE-2021-4387 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2021
WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypass CVE-2021-4386 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2021
WooCommerce Etsy Integration <= 3.3.1 - Cross-Site Request Forgery Bypass CVE-2021-4409 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2021
RAYS Grid <= 1.2.2 - Cross-Site Request Forgery Bypass CVE-2021-4423 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2021
Rucy <= 0.4.4 - Cross-Site Request Forgery Bypass CVE-2021-4396 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2021
Event Espresso 4 Decaf <= 4.10.11 - Cross-Site Request Forgery Bypass CVE-2021-4404 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 16, 2021
Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure CVE-2021-4375 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N August 6, 2021
WordPress Photo Gallery – Image Gallery <= 1.0.6 - Cross-Site Request Forgery Bypass CVE-2021-4384 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 16, 2021
Amministrazione Trasparente <= 7.1 - Cross-Site Request Forgery Bypass CVE-2021-4398 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 5, 2021
WP EasyPay – Square for WordPress <= 3.2.0 - Cross-Site Request Forgery Bypass CVE-2021-4411 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 5, 2021
Slider Hero <= 8.2.0 - Cross-Site Request Forgery Bypass CVE-2021-4424 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 5, 2021
Locations <= 3.2.1 - Cross-Site Request Forgery Bypass CVE-2021-4394 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 5, 2021
Abandoned Cart Recovery for WooCommerce <= 1.0.4 - Cross-Site Request Forgery Bypass CVE-2021-4395 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 5, 2021

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation