Wordfence Intelligence   >   Vulnerability Researchers   >   Le Ngoc Anh

Le Ngoc Anh

Organization: sun*inc

31
All Time Ranking
92
All Time Discoveries

Showing 1-20 of 92 Vulnerabilities

Regenerate post permalink <= 1.0.3 - Cross-Site Request Forgery
4.3
CVE-2024-33681
Apr 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Integration for Contact Form 7 HubSpot <= 1.2.8 - Open Redirect via state parameter
4.3
CVE-2023-31095
Apr 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Integration for Contact Form 7 and Constant Contact <= 1.1.4 - Open Redirect
4.7
CVE-2023-47779
Nov 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Core Web Vitals & PageSpeed Booster <= 1.0.12 - Open Redirect via _wp_http_referer
4.7
CVE-2023-35883
Jun 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
OAuth Server <= 4.3.3 - Open Redirect
5.4
CVE-2024-31253
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Pz-LinkCard <= 2.5.2 - Cross-Site Request Forgery via page_cacheman
5.4
CVE-2023-47790
Nov 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Seers | GDPR & CCPA Cookie Consent & Compliance <= 8.1.0 - Cross-Site Request Forgery
6.1
CVE-2024-32789
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) <= 2.0.8.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-32785
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Freshdesk (official) <= 2.3.6 - Open Redirect
6.1
CVE-2024-32129
Apr 12, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WebinarPress <= 1.33.9 - Reflected Cross-Site Scripting
6.1
CVE-2024-31256
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-31255
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ReDi Restaurant Reservation <= 24.0128 - Reflected Cross-Site Scripting
6.1
CVE-2024-29806
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Bulk NoIndex & NoFollow Toolkit <= 2.01 - Reflected Cross-Site Scripting via tab, order, and orderby
6.1
CVE-2024-29791
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-29794
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Shipping with Venipak for WooCommerce <= 1.19.5 - Reflected Cross-Site Scripting via 'venipak_labels_link'
6.1
CVE-2024-29805
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Advanced Sermons <= 3.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-27952
Mar 13, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
VK Poster Group <= 2.0.3 - Reflected Cross-Site Scripting via vkp_repost
6.1
CVE-2024-24932
Feb 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
PDF Poster - PDF Embedder Plugin for WordPress <= 2.1.17 - Reflected Cross-Site Scripting
6.1
CVE-2024-23508
Jan 24, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
BP Profile Search <= 5.5 - Reflected Cross-Site Scripting via BPS_FORM
6.1
CVE-2024-22293
Jan 17, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Shortcodes Finder <= 1.5.4 - Reflected Cross-Site Scripting via nonce
6.1
CVE-2024-21750
Jan 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Regenerate post permalink <= 1.0.3 - Cross-Site Request Forgery CVE-2024-33681 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 19, 2024
Integration for Contact Form 7 HubSpot <= 1.2.8 - Open Redirect via state parameter CVE-2023-31095 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 26, 2023
Integration for Contact Form 7 and Constant Contact <= 1.1.4 - Open Redirect CVE-2023-47779 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N November 14, 2023
Core Web Vitals & PageSpeed Booster <= 1.0.12 - Open Redirect via _wp_http_referer CVE-2023-35883 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N June 19, 2023
OAuth Server <= 4.3.3 - Open Redirect CVE-2024-31253 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N April 5, 2024
Pz-LinkCard <= 2.5.2 - Cross-Site Request Forgery via page_cacheman CVE-2023-47790 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L November 14, 2023
Seers | GDPR & CCPA Cookie Consent & Compliance <= 8.1.0 - Cross-Site Request Forgery CVE-2024-32789 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 22, 2024
The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) <= 2.0.8.3 - Reflected Cross-Site Scripting CVE-2024-32785 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 22, 2024
Freshdesk (official) <= 2.3.6 - Open Redirect CVE-2024-32129 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 12, 2024
WebinarPress <= 1.33.9 - Reflected Cross-Site Scripting CVE-2024-31256 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 5, 2024
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 - Reflected Cross-Site Scripting CVE-2024-31255 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 5, 2024
ReDi Restaurant Reservation <= 24.0128 - Reflected Cross-Site Scripting CVE-2024-29806 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
Bulk NoIndex & NoFollow Toolkit <= 2.01 - Reflected Cross-Site Scripting via tab, order, and orderby CVE-2024-29791 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting CVE-2024-29794 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
Shipping with Venipak for WooCommerce <= 1.19.5 - Reflected Cross-Site Scripting via 'venipak_labels_link' CVE-2024-29805 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
Advanced Sermons <= 3.2 - Reflected Cross-Site Scripting CVE-2024-27952 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 13, 2024
VK Poster Group <= 2.0.3 - Reflected Cross-Site Scripting via vkp_repost CVE-2024-24932 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 9, 2024
PDF Poster - PDF Embedder Plugin for WordPress <= 2.1.17 - Reflected Cross-Site Scripting CVE-2024-23508 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 24, 2024
BP Profile Search <= 5.5 - Reflected Cross-Site Scripting via BPS_FORM CVE-2024-22293 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 17, 2024
Shortcodes Finder <= 1.5.4 - Reflected Cross-Site Scripting via nonce CVE-2024-21750 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation