Kacper Szurek

Wordfence Intelligence   >   Vulnerability Researchers   >   Kacper Szurek

Vulnerabilities Discovered:

63
All Time Discoveries
0
Discoveries since Sep 1, 2023

Showing 1-20 of 63 vulnerabilities

All Import Pro Plugin < 4.1.2 - SQL injection
8.8
CVE ID Unknown
Mar 19, 2020
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks
6.3
CVE ID Unknown
Feb 19, 2020
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection
7.2
CVE ID Unknown
Feb 19, 2020
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lingotek Translation <= 1.1.8 - Cross-Site Scripting
6.1
CVE ID Unknown
Jun 20, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Support Plus Responsive Ticket System <= 7.1.4 - Authentication Bypass
9.8
CVE ID Unknown
Jun 12, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Double Opt-In for Download <= 2.0.9 - SQL Injection
8.8
CVE ID Unknown
Jun 6, 2016
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Comments - wpDiscuz <= 3.1.4 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
May 30, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Wordfence Security – Firewall & Malware Scan 6.1.1 - 6.1.6 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
May 10, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Slideshow Gallery <= 1.6 - Cross-Site Scripting
6.1
CVE ID Unknown
Mar 21, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Image Gallery – Responsive Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting via linkbutton
6.1
CVE ID Unknown
Feb 8, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Formidable Form Builder <= 1.07.11 - SQL Injection
8.8
CVE-2014-9309
Jan 26, 2016
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Simple Ads Manager <= 2.9.4.116 - SQL Injection
9.8
CVE ID Unknown
Dec 30, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Admin Management Xtended <= 2.4.0 - Missing Authorization Checks
4.3
CVE-2015-9390
Dec 14, 2015
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Breezing Forms <= 1.2.7.30 - SQL Injection
8.8
CVE ID Unknown
Dec 2, 2015
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Page Builder by SiteOrigin < 2.0.5 - Reflected Cross-Site Scripting
5.3
CVE ID Unknown
Dec 1, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Google Doc Embedder < 2.5.17 - SQL Injection
9.8
CVE-2014-9173
Nov 28, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Profile Builder – User Profile & User Registration Forms <= 2.2.4 - Reflected Cross-Site Scripting
6.1
CVE-2015-9328
Nov 11, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Fastest Cache < 0.8.4.9 - SQL Injection
9.8
CVE-2015-9316
Nov 11, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Livefyre Comments 3 <= 4.1.4 - Stored Cross-Site Scripting
6.4
CVE ID Unknown
Aug 2, 2015
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
FrieChat - WordPress Chat Plugin < 1.0.3 - SQL Injection
9.8
CVE ID Unknown
Jul 13, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
All Import Pro Plugin < 4.1.2 - SQL injection 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H March 19, 2020
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L February 19, 2020
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H February 19, 2020
Lingotek Translation <= 1.1.8 - Cross-Site Scripting 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 20, 2016
WP Support Plus Responsive Ticket System <= 7.1.4 - Authentication Bypass 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 12, 2016
Double Opt-In for Download <= 2.0.9 - SQL Injection 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H June 6, 2016
Comments - wpDiscuz <= 3.1.4 - Reflected Cross-Site Scripting 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 30, 2016
Wordfence Security – Firewall & Malware Scan 6.1.1 - 6.1.6 - Reflected Cross-Site Scripting 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 10, 2016
Slideshow Gallery <= 1.6 - Cross-Site Scripting 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 21, 2016
Image Gallery – Responsive Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting via linkbutton 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 8, 2016
Formidable Form Builder <= 1.07.11 - SQL Injection CVE-2014-9309 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 26, 2016
Simple Ads Manager <= 2.9.4.116 - SQL Injection 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 30, 2015
Admin Management Xtended <= 2.4.0 - Missing Authorization Checks CVE-2015-9390 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N December 14, 2015
Breezing Forms <= 1.2.7.30 - SQL Injection 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 2, 2015
Page Builder by SiteOrigin < 2.0.5 - Reflected Cross-Site Scripting 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 1, 2015
Google Doc Embedder < 2.5.17 - SQL Injection CVE-2014-9173 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 28, 2015
Profile Builder – User Profile & User Registration Forms <= 2.2.4 - Reflected Cross-Site Scripting CVE-2015-9328 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 11, 2015
WP Fastest Cache < 0.8.4.9 - SQL Injection CVE-2015-9316 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 11, 2015
Livefyre Comments 3 <= 4.1.4 - Stored Cross-Site Scripting 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N August 2, 2015
FrieChat - WordPress Chat Plugin < 1.0.3 - SQL Injection 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 13, 2015

Share this researcher's vulnerability discoveries

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation