Wordfence Intelligence   >   Vulnerability Researchers   >   Mika

Mika

4
All Time Ranking
297
All Time Discoveries

Showing 1-20 of 297 Vulnerabilities

Filter Custom Fields & Taxonomies Light <= 1.05 - Missing Authorization
4.3
CVE-2024-32081
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WP Compress – Image Optimizer [All-In-One] <= 6.10.35 - Cross-Site Request Forgery
4.3
CVE-2024-32106
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
F4 Improvements <= 1.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-31925
Apr 10, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Link Whisper Free <= 0.6.9
4.3
CVE-2024-31934
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AppPresser <= 4.3.0 - Cross-Site Request Forgery via force_logging_off()
4.3
CVE-2024-31374
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Accessibility Helper (WAH) <= 0.6.2.5 - Missing Authorization
4.3
CVE-2024-31423
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EmbedPress <= 3.9.11 - Missing Authorization
5.3
CVE-2024-31274
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Email Subscribers & Newsletters <= 5.7.13 - Missing Authorization
5.3
CVE-2024-31352
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
ShortPixel Adaptive Images <= 3.8.2 - Missing Authorization in activate_ai_handler and deactivate_ai_handler
5.3
CVE-2024-31230
Apr 2, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Filter Custom Fields & Taxonomies Light <= 1.05 - Authenticated (Contributor+) PHP Object Injection
8.8
CVE-2024-31094
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Move Addons for Elementor <= 1.2.9 - Missing Authorization
5.3
CVE-2024-30525
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
DELUCKS SEO <= 2.5.4 - Missing Authorization
5.3
CVE-2024-30538
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Platinum SEO <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-31089
Mar 29, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Sticky Anything <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2024-30551
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Klarna Payments for WooCommerce <= 3.2.4 - Missing Authorization
5.3
CVE-2024-30477
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Newsletter <= 8.2.0 - IP Spoofing
5.3
CVE-2024-30522
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
IP Blocker Lite <= 11.1.1 - IP Spoofing
5.3
CVE-2024-30479
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CGC Maintenance Mode <= 1.2 - IP Spoofing
5.3
CVE-2024-30480
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Heureka <= 1.0.8 - Cross-Site Request Forgery
4.3
CVE-2024-25931
Feb 20, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Action Network <= 1.4.2 - Reflected Cross-Site Scripting via 'search'
6.1
CVE-2024-25921
Feb 14, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Filter Custom Fields & Taxonomies Light <= 1.05 - Missing Authorization CVE-2024-32081 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 11, 2024
WP Compress – Image Optimizer [All-In-One] <= 6.10.35 - Cross-Site Request Forgery CVE-2024-32106 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
F4 Improvements <= 1.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-31925 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 10, 2024
Link Whisper Free <= 0.6.9 CVE-2024-31934 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 10, 2024
AppPresser <= 4.3.0 - Cross-Site Request Forgery via force_logging_off() CVE-2024-31374 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 10, 2024
WP Accessibility Helper (WAH) <= 0.6.2.5 - Missing Authorization CVE-2024-31423 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 10, 2024
EmbedPress <= 3.9.11 - Missing Authorization CVE-2024-31274 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 5, 2024
Email Subscribers & Newsletters <= 5.7.13 - Missing Authorization CVE-2024-31352 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 5, 2024
ShortPixel Adaptive Images <= 3.8.2 - Missing Authorization in activate_ai_handler and deactivate_ai_handler CVE-2024-31230 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 2, 2024
Filter Custom Fields & Taxonomies Light <= 1.05 - Authenticated (Contributor+) PHP Object Injection CVE-2024-31094 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H March 29, 2024
Move Addons for Elementor <= 1.2.9 - Missing Authorization CVE-2024-30525 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 29, 2024
DELUCKS SEO <= 2.5.4 - Missing Authorization CVE-2024-30538 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 29, 2024
Platinum SEO <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-31089 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 29, 2024
Sticky Anything <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting CVE-2024-30551 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N March 29, 2024
Klarna Payments for WooCommerce <= 3.2.4 - Missing Authorization CVE-2024-30477 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 28, 2024
Newsletter <= 8.2.0 - IP Spoofing CVE-2024-30522 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 28, 2024
IP Blocker Lite <= 11.1.1 - IP Spoofing CVE-2024-30479 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 28, 2024
CGC Maintenance Mode <= 1.2 - IP Spoofing CVE-2024-30480 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N March 28, 2024
Heureka <= 1.0.8 - Cross-Site Request Forgery CVE-2024-25931 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 20, 2024
Action Network <= 1.4.2 - Reflected Cross-Site Scripting via 'search' CVE-2024-25921 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 14, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation