Wordfence Intelligence   >   Vulnerability Researchers   >   Mika

Mika

4
All Time Ranking
308
All Time Discoveries

Showing 241-260 of 308 Vulnerabilities

WP Social Bookmarking Light <= 2.0.7 - Cross-Site Request Forgery
4.3
CVE-2023-25029
Feb 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Maspik – Spam blacklist <= 0.7.8 - Cross-Site Request Forgery
4.3
CVE-2023-24008
Feb 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Google Tag Manager <= 1.1 - Cross-Site Request Forgery
4.3
CVE-2023-22693
Feb 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Sheets To WP Table Live Sync <= 2.12.15 - Cross-Site Request Forgery
5.4
CVE-2023-26535
Feb 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Sp*tify Play Button for WordPress <= 2.05 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2023-26536
Feb 24, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
phpinfo() WP <= 4.0 - Cross-Site Request Forgery
5.4
CVE-2023-26542
Feb 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
My YouTube Channel <= 3.23.3 - Cross-Site Request Forgery to Cache Deletion
4.3
CVE-2023-25987
Feb 23, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
All In One Favicon <= 4.7 - Authenticated(Admin+) Directory Traversal
6.5
CVE-2023-24416
Feb 23, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Admin Block Country <= 7.1.4 - Cross-Site Request Forgery via admin_block_country_initial_page
5.4
CVE-2023-24007
Feb 23, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
GMAce <= 1.5.2 - Authenticated(Admin+) Directory Traversal
4.9
CVE-2023-23872
Feb 23, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
GMAce <= 1.5.2 - Cross-Site Request Forgery via gmace_manager_client
8.1
CVE-2023-23861
Feb 23, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Read More Excerpt Link <= 1.5 - Cross-Site Request Forgery
4.3
CVE-2023-26011
Feb 21, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Minify HTML <= 2.1.7 - Cross-Site Request Forgery in minify_html_menu_options
4.3
CVE-2023-26014
Feb 21, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Easy Google Analytics for WordPress <= 1.6.0 - Cross-Site Request Forgery
6.1
CVE-2023-23887
Feb 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Theme Tweaker <= 5.20 - Cross-Site Request Forgery
4.3
CVE-2023-23713
Feb 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WordPress Comments Import & Export <= 2.3.1 - CSV Injection
6.1
CVE-2022-45370
Feb 6, 2023
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Icegram Express <= 5.5.2 - Unauthenticated CSV Injection
6.5
CVE-2022-45810
Feb 6, 2023
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Auto YouTube Importer <= 1.0.3 - Cross-Site Request Forgery
5.4
CVE-2023-23797
Feb 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Commenter Emails <= 2.6.1 - Unauthenticated CSV Injection
6.5
CVE-2022-45360
Feb 2, 2023
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Posts and Users Stats <= 1.1.3 - Authenticated (Subscriber+) CSV Injection
5.8
CVE-2022-44738
Feb 2, 2023
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
Title CVE ID CVSS Vector Date
WP Social Bookmarking Light <= 2.0.7 - Cross-Site Request Forgery CVE-2023-25029 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 28, 2023
Maspik – Spam blacklist <= 0.7.8 - Cross-Site Request Forgery CVE-2023-24008 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 27, 2023
WP Google Tag Manager <= 1.1 - Cross-Site Request Forgery CVE-2023-22693 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 27, 2023
Sheets To WP Table Live Sync <= 2.12.15 - Cross-Site Request Forgery CVE-2023-26535 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 27, 2023
Sp*tify Play Button for WordPress <= 2.05 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-26536 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N February 24, 2023
phpinfo() WP <= 4.0 - Cross-Site Request Forgery CVE-2023-26542 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 24, 2023
My YouTube Channel <= 3.23.3 - Cross-Site Request Forgery to Cache Deletion CVE-2023-25987 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 23, 2023
All In One Favicon <= 4.7 - Authenticated(Admin+) Directory Traversal CVE-2023-24416 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H February 23, 2023
Admin Block Country <= 7.1.4 - Cross-Site Request Forgery via admin_block_country_initial_page CVE-2023-24007 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L February 23, 2023
GMAce <= 1.5.2 - Authenticated(Admin+) Directory Traversal CVE-2023-23872 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N February 23, 2023
GMAce <= 1.5.2 - Cross-Site Request Forgery via gmace_manager_client CVE-2023-23861 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H February 23, 2023
Read More Excerpt Link <= 1.5 - Cross-Site Request Forgery CVE-2023-26011 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 21, 2023
Minify HTML <= 2.1.7 - Cross-Site Request Forgery in minify_html_menu_options CVE-2023-26014 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 21, 2023
Easy Google Analytics for WordPress <= 1.6.0 - Cross-Site Request Forgery CVE-2023-23887 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 20, 2023
Theme Tweaker <= 5.20 - Cross-Site Request Forgery CVE-2023-23713 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 20, 2023
WordPress Comments Import & Export <= 2.3.1 - CSV Injection CVE-2022-45370 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L February 6, 2023
Icegram Express <= 5.5.2 - Unauthenticated CSV Injection CVE-2022-45810 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L February 6, 2023
Auto YouTube Importer <= 1.0.3 - Cross-Site Request Forgery CVE-2023-23797 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L February 3, 2023
Commenter Emails <= 2.6.1 - Unauthenticated CSV Injection CVE-2022-45360 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L February 2, 2023
Posts and Users Stats <= 1.1.3 - Authenticated (Subscriber+) CSV Injection CVE-2022-44738 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L February 2, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation