Wordfence Intelligence   >   Vulnerability Researchers   >   Le Ngoc Anh

Le Ngoc Anh

Organization: sun*inc

32
All Time Ranking
96
All Time Discoveries

Showing 61-80 of 96 Vulnerabilities

Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting
6.1
CVE-2023-50376
Dec 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
HT Mega – Absolute Addons For Elementor <= 2.3.8 - Reflected Cross-Site Scripting
6.1
CVE-2023-50901
Dec 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Google Photos Gallery with Shortcodes <= 4.0.2 - Reflected Cross-Site Scripting
6.1
CVE-2023-51373
Dec 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Page Builder: Live Composer <= 1.5.25 - Authenticated (Author+) PHP Object Injection
8.8
CVE-2023-52206
Jan 3, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
pTypeConverter <= 0.2.8.1 - Authenticated (Editor+) SQL Injection
7.2
CVE-2023-52201
Jan 3, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Ajax Search Lite <= 4.11.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-21752
Jan 4, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Shortcodes Finder <= 1.5.4 - Reflected Cross-Site Scripting via nonce
6.1
CVE-2024-21750
Jan 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Testimonials <= 1.4.3 - Authenticated (Contributor+) SQL Injection
8.8
CVE-2024-25924
Jan 12, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Asgaros Forum <= 2.7.2 - Unauthenticated PHP Object Injection in prepare_unread_status
9.8
CVE-2024-22284
Jan 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
BP Profile Search <= 5.5 - Reflected Cross-Site Scripting via BPS_FORM
6.1
CVE-2024-22293
Jan 17, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ChatBot <= 5.1.0 - Unauthenticated PHP Object Injection
9.8
CVE-2024-22309
Jan 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
PDF Poster - PDF Embedder Plugin for WordPress <= 2.1.17 - Reflected Cross-Site Scripting
6.1
CVE-2024-23508
Jan 24, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
MultiVendorX Marketplace <= 4.1.2 - Missing Authorization
8.6
CVE-2024-24703
Jan 31, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
VK Poster Group <= 2.0.3 - Reflected Cross-Site Scripting via vkp_repost
6.1
CVE-2024-24932
Feb 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Malware Scanner <= 4.7.2 - Authenticated (Administrator+) SQL Injection
6.6
CVE-2024-25902
Feb 12, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Advanced Sermons <= 3.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-27952
Mar 13, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Bulk NoIndex & NoFollow Toolkit <= 2.01 - Reflected Cross-Site Scripting via tab, order, and orderby
6.1
CVE-2024-29791
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-29794
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ReDi Restaurant Reservation <= 24.0128 - Reflected Cross-Site Scripting
6.1
CVE-2024-29806
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Shipping with Venipak for WooCommerce <= 1.19.5 - Reflected Cross-Site Scripting via 'venipak_labels_link'
6.1
CVE-2024-29805
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting CVE-2023-50376 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 19, 2023
HT Mega – Absolute Addons For Elementor <= 2.3.8 - Reflected Cross-Site Scripting CVE-2023-50901 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 26, 2023
Google Photos Gallery with Shortcodes <= 4.0.2 - Reflected Cross-Site Scripting CVE-2023-51373 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 26, 2023
Page Builder: Live Composer <= 1.5.25 - Authenticated (Author+) PHP Object Injection CVE-2023-52206 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 3, 2024
pTypeConverter <= 0.2.8.1 - Authenticated (Editor+) SQL Injection CVE-2023-52201 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H January 3, 2024
Ajax Search Lite <= 4.11.4 - Reflected Cross-Site Scripting CVE-2024-21752 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 4, 2024
Shortcodes Finder <= 1.5.4 - Reflected Cross-Site Scripting via nonce CVE-2024-21750 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 10, 2024
WP Testimonials <= 1.4.3 - Authenticated (Contributor+) SQL Injection CVE-2024-25924 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 12, 2024
Asgaros Forum <= 2.7.2 - Unauthenticated PHP Object Injection in prepare_unread_status CVE-2024-22284 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 16, 2024
BP Profile Search <= 5.5 - Reflected Cross-Site Scripting via BPS_FORM CVE-2024-22293 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 17, 2024
ChatBot <= 5.1.0 - Unauthenticated PHP Object Injection CVE-2024-22309 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 19, 2024
PDF Poster - PDF Embedder Plugin for WordPress <= 2.1.17 - Reflected Cross-Site Scripting CVE-2024-23508 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 24, 2024
MultiVendorX Marketplace <= 4.1.2 - Missing Authorization CVE-2024-24703 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L January 31, 2024
VK Poster Group <= 2.0.3 - Reflected Cross-Site Scripting via vkp_repost CVE-2024-24932 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 9, 2024
Malware Scanner <= 4.7.2 - Authenticated (Administrator+) SQL Injection CVE-2024-25902 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H February 12, 2024
Advanced Sermons <= 3.2 - Reflected Cross-Site Scripting CVE-2024-27952 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 13, 2024
Bulk NoIndex & NoFollow Toolkit <= 2.01 - Reflected Cross-Site Scripting via tab, order, and orderby CVE-2024-29791 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting CVE-2024-29794 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
ReDi Restaurant Reservation <= 24.0128 - Reflected Cross-Site Scripting CVE-2024-29806 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024
Shipping with Venipak for WooCommerce <= 1.19.5 - Reflected Cross-Site Scripting via 'venipak_labels_link' CVE-2024-29805 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 25, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation