Wordfence Intelligence   >   Vulnerability Researchers   >   Kyle Sanchez

Kyle Sanchez

123
All Time Ranking
18
All Time Discoveries

18 Vulnerabilities

Rate My Post – Star Rating Plugin by FeedbackWP <= 3.4.4 - Insecure Direct Object Reference
5.3
CVE-2024-32823
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
ProfileGrid <= 5.8.2 - Bypass Group Members Limit
5.3
CVE-2024-32774
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference
4.3
CVE-2024-32772
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference
4.3
CVE-2024-32808
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Wp Ultimate Review <= 2.2.5 - Unauthenticated Insecure Direct Object Reference
5.3
CVE-2024-32683
Apr 17, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Wp Ultimate Review <= 2.2.5 - Missing Authorization
5.3
CVE-2024-32684
Apr 17, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Wp Ultimate Review <= 2.2.5 - Unauthenticated Review Restriction Bypass
5.3
CVE-2024-32685
Apr 17, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Insecure Direct Object Reference
4.3
CVE-2024-32604
Apr 16, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
ProfileGrid <= 5.7.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
4.3
CVE-2024-31291
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Thumbs Rating <= 5.1.0 - Unauthenticated Insecure Direct Object Reference
5.3
CVE-2024-31095
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
VS Contact Form <= 14.7 - CAPTCHA Bypass
5.3
CVE-2024-30540
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
weForms <= 1.6.20 - Missing Authorization
5.3
CVE-2024-30512
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CP Polls <= 1.0.71 - Unauthenticated Poll Limit Bypass
5.3
CVE-2024-24873
Feb 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CP Polls <= 1.0.71 - Unauthenticated Content Injection
5.3
CVE-2024-24874
Feb 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Custom 404 Pro <= 3.10.0 - Unauthenticated Stored Cross-Site Scripting via logging
7.2
CVE-2023-51540
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
RegistrationMagic <= 5.2.5.0 - Form Submission Limit Bypass
5.3
CVE-2023-51544
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WP Photo Album Plus <= 8.5.02.005 - Cross-Site Scripting
6.1
CVE-2023-49813
Dec 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Photo Album Plus <= 8.5.02.005 - Insecure Direct Object Reference
5.3
CVE-2023-49812
Dec 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Rate My Post – Star Rating Plugin by FeedbackWP <= 3.4.4 - Insecure Direct Object Reference CVE-2024-32823 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 22, 2024
ProfileGrid <= 5.8.2 - Bypass Group Members Limit CVE-2024-32774 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 22, 2024
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference CVE-2024-32772 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 22, 2024
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference CVE-2024-32808 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N April 22, 2024
Wp Ultimate Review <= 2.2.5 - Unauthenticated Insecure Direct Object Reference CVE-2024-32683 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 17, 2024
Wp Ultimate Review <= 2.2.5 - Missing Authorization CVE-2024-32684 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 17, 2024
Wp Ultimate Review <= 2.2.5 - Unauthenticated Review Restriction Bypass CVE-2024-32685 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 17, 2024
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Insecure Direct Object Reference CVE-2024-32604 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 16, 2024
ProfileGrid <= 5.7.6 - Authenticated (Subscriber+) Insecure Direct Object Reference CVE-2024-31291 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 5, 2024
Thumbs Rating <= 5.1.0 - Unauthenticated Insecure Direct Object Reference CVE-2024-31095 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 29, 2024
VS Contact Form <= 14.7 - CAPTCHA Bypass CVE-2024-30540 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 29, 2024
weForms <= 1.6.20 - Missing Authorization CVE-2024-30512 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N March 28, 2024
CP Polls <= 1.0.71 - Unauthenticated Poll Limit Bypass CVE-2024-24873 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N February 5, 2024
CP Polls <= 1.0.71 - Unauthenticated Content Injection CVE-2024-24874 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N February 5, 2024
Custom 404 Pro <= 3.10.0 - Unauthenticated Stored Cross-Site Scripting via logging CVE-2023-51540 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N December 27, 2023
RegistrationMagic <= 5.2.5.0 - Form Submission Limit Bypass CVE-2023-51544 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 27, 2023
WP Photo Album Plus <= 8.5.02.005 - Cross-Site Scripting CVE-2023-49813 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 5, 2023
WP Photo Album Plus <= 8.5.02.005 - Insecure Direct Object Reference CVE-2023-49812 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 5, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation