Wordfence Intelligence   >   Vulnerability Researchers   >   Mika

Mika

4
All Time Ranking
308
All Time Discoveries

Showing 201-220 of 308 Vulnerabilities

Database Collation Fix <= 1.2.7 - Cross-Site Request Forgery via admin_page
4.3
CVE-2023-23997
Apr 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Reroute Email <= 1.4.6 - Cross-Site Request Forgery
4.3
CVE-2023-27606
Apr 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Reroute Email <= 1.4.6 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-27605
Apr 14, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
ReviewX <= 1.6.7 - Unauthenticated CSV Injection
6.5
CVE-2022-46809
Apr 13, 2023
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
PixTypes <= 1.4.14 - Cross-Site Request Forgery
4.3
CVE-2023-25487
Apr 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
tencentcloud-cos <= 1.0.7 - Missing Authorization via AJAX actions
4.3
CVE-2023-29433
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
PHP Compatibility Checker <= 1.5.2 - Cross-Site Request Forgery
4.3
CVE-2023-24421
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Cryptocurrency All-in-One <= 3.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2023-29435
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
IFrame Shortcode <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2023-29436
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Transbank Webpay REST <= 1.6.6 - Authenticated (Administrator+) SQL Injection via orderby
7.2
CVE-2023-27610
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Comment Reply Notification <= 1.4 - Cross-Site Request Forgery
4.3
CVE-2023-25051
Apr 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Wp Ultimate Review <= 2.0.3 - Cross-Site Request Forgery
4.3
CVE-2023-28987
Mar 29, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
IP Blocker Lite <= 11.1.1 - Cross-Site Request Forgery
5.4
CVE-2023-23993
Mar 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Export Users Data Distinct <= 1.3 - Authenticated (Subscriber+) CSV Injection
5.8
CVE-2022-46804
Mar 22, 2023
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
amr users <= 4.59.4 - Authenticated (Subscriber+) CSV Injection
5.8
CVE-2022-45348
Mar 22, 2023
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
CBX Currency Converter <= 3.0.3 - Cross-Site Request Forgery leading to Plugin Settings Leakage/Changes
5.4
CVE-2023-28747
Mar 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
BigContact <= 1.5.8 - Cross-Site Request Forgery leading to Plugin Settings Updates
4.3
CVE-2023-22694
Mar 21, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weather Station <= 3.8.11 - Cross-Site Request Forgery
4.3
CVE-2023-25478
Mar 21, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Google XML Sitemap for Mobile <= 1.6.1 - Cross-Site Request Forgery via mobile_sitemap_generate
4.3
CVE-2023-23869
Mar 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Simple Mobile URL Redirect <= 1.7.2 - Cross-Site Request Forgery leading to Mobile Redirect Updates
4.3
CVE-2023-23897
Mar 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Title CVE ID CVSS Vector Date
Database Collation Fix <= 1.2.7 - Cross-Site Request Forgery via admin_page CVE-2023-23997 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 14, 2023
WP Reroute Email <= 1.4.6 - Cross-Site Request Forgery CVE-2023-27606 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 14, 2023
WP Reroute Email <= 1.4.6 - Authenticated (Administrator+) SQL Injection CVE-2023-27605 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H April 14, 2023
ReviewX <= 1.6.7 - Unauthenticated CSV Injection CVE-2022-46809 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L April 13, 2023
PixTypes <= 1.4.14 - Cross-Site Request Forgery CVE-2023-25487 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 7, 2023
tencentcloud-cos <= 1.0.7 - Missing Authorization via AJAX actions CVE-2023-29433 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 6, 2023
PHP Compatibility Checker <= 1.5.2 - Cross-Site Request Forgery CVE-2023-24421 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 6, 2023
Cryptocurrency All-in-One <= 3.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-29435 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 6, 2023
IFrame Shortcode <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-29436 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 6, 2023
Transbank Webpay REST <= 1.6.6 - Authenticated (Administrator+) SQL Injection via orderby CVE-2023-27610 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H April 6, 2023
Comment Reply Notification <= 1.4 - Cross-Site Request Forgery CVE-2023-25051 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 4, 2023
Wp Ultimate Review <= 2.0.3 - Cross-Site Request Forgery CVE-2023-28987 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 29, 2023
IP Blocker Lite <= 11.1.1 - Cross-Site Request Forgery CVE-2023-23993 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L March 28, 2023
Export Users Data Distinct <= 1.3 - Authenticated (Subscriber+) CSV Injection CVE-2022-46804 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L March 22, 2023
amr users <= 4.59.4 - Authenticated (Subscriber+) CSV Injection CVE-2022-45348 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L March 22, 2023
CBX Currency Converter <= 3.0.3 - Cross-Site Request Forgery leading to Plugin Settings Leakage/Changes CVE-2023-28747 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N March 22, 2023
BigContact <= 1.5.8 - Cross-Site Request Forgery leading to Plugin Settings Updates CVE-2023-22694 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 21, 2023
Weather Station <= 3.8.11 - Cross-Site Request Forgery CVE-2023-25478 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 21, 2023
Google XML Sitemap for Mobile <= 1.6.1 - Cross-Site Request Forgery via mobile_sitemap_generate CVE-2023-23869 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 20, 2023
Simple Mobile URL Redirect <= 1.7.2 - Cross-Site Request Forgery leading to Mobile Redirect Updates CVE-2023-23897 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L March 20, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation