Wordfence Intelligence   >   Vulnerability Researchers   >   Mika

Mika

4
All Time Ranking
305
All Time Discoveries

Showing 21-40 of 305 Vulnerabilities

Post Grid <= 2.2.50 - Missing Authorization to Sensitive Information Exposure via REST API
7.5
CVE-2023-40211
Aug 11, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Post to CSV by BestWebSoft <= 1.4.0 - Authenticated (Author+) CSV Injection
7.4
CVE-2023-36527
Jun 28, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Woocommerce Support System <= 1.2.1 - Missing Authorization
7.3
CVE-2023-41686
Sep 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Checkout with Zelle on Woocommerce <= 3.1 - Missing Authorization
7.3
CVE-2023-37969
Jul 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Sticky Anything <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2024-30551
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Advanced Database Cleaner <= 3.1.2 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-49764
Dec 4, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
MSync <= 1.0.0 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-49166
Nov 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
ChatBot <= 4.7.8 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-48741
Nov 23, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
License Manager for WooCommerce <= 2.2.10 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-48742
Nov 23, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Motors – Car Dealer & Classified Ads <= 1.4.6 - Server Side Request Forgery
7.2
CVE-2023-46207
Oct 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Travel Map <= 1.0.1 - Unauthenticated Cross-Site Scripting
7.2
CVE-2023-41860
Sep 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Woocommerce Support System <= 1.2.1 - Authenticated (Administrator+) SQL Injection via 'orderby'
7.2
CVE-2023-41685
Sep 4, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WP Report Post <= 2.1.2 - Authenticated (Editor+) SQL Injection
7.2
CVE-2023-34168
May 30, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
SIS Handball <= 1.0.45 - Authenticated (Administrator+) SQL Injection via 'orderby'
7.2
CVE-2023-33924
May 23, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Cryptocurrency Donation Box – Bitcoin & Crypto Donations <= 2.2.7 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-32128
May 5, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WP Reroute Email <= 1.4.6 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-27605
Apr 14, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Transbank Webpay REST <= 1.6.6 - Authenticated (Administrator+) SQL Injection via orderby
7.2
CVE-2023-27610
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Simple Newsletter Plugin – Noptin <= 1.10.3 - Unauthenticated CSV Injection
7.2
CVE-2022-46803
Jan 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
IP Blacklist Cloud <= 5.00 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2022-43462
Oct 24, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Search Logger <= 0.9 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2022-3131
Sep 20, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Post Grid <= 2.2.50 - Missing Authorization to Sensitive Information Exposure via REST API CVE-2023-40211 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N August 11, 2023
Post to CSV by BestWebSoft <= 1.4.0 - Authenticated (Author+) CSV Injection CVE-2023-36527 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L June 28, 2023
Woocommerce Support System <= 1.2.1 - Missing Authorization CVE-2023-41686 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L September 4, 2023
Checkout with Zelle on Woocommerce <= 3.1 - Missing Authorization CVE-2023-37969 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L July 12, 2023
Sticky Anything <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting CVE-2024-30551 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N March 29, 2024
Advanced Database Cleaner <= 3.1.2 - Authenticated (Administrator+) SQL Injection CVE-2023-49764 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 4, 2023
MSync <= 1.0.0 - Authenticated (Administrator+) SQL Injection CVE-2023-49166 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 29, 2023
ChatBot <= 4.7.8 - Authenticated (Administrator+) SQL Injection CVE-2023-48741 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 23, 2023
License Manager for WooCommerce <= 2.2.10 - Authenticated (Administrator+) SQL Injection CVE-2023-48742 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 23, 2023
Motors – Car Dealer & Classified Ads <= 1.4.6 - Server Side Request Forgery CVE-2023-46207 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N October 19, 2023
Travel Map <= 1.0.1 - Unauthenticated Cross-Site Scripting CVE-2023-41860 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N September 5, 2023
Woocommerce Support System <= 1.2.1 - Authenticated (Administrator+) SQL Injection via 'orderby' CVE-2023-41685 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H September 4, 2023
WP Report Post <= 2.1.2 - Authenticated (Editor+) SQL Injection CVE-2023-34168 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 30, 2023
SIS Handball <= 1.0.45 - Authenticated (Administrator+) SQL Injection via 'orderby' CVE-2023-33924 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 23, 2023
Cryptocurrency Donation Box – Bitcoin & Crypto Donations <= 2.2.7 - Authenticated (Administrator+) SQL Injection CVE-2023-32128 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 5, 2023
WP Reroute Email <= 1.4.6 - Authenticated (Administrator+) SQL Injection CVE-2023-27605 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H April 14, 2023
Transbank Webpay REST <= 1.6.6 - Authenticated (Administrator+) SQL Injection via orderby CVE-2023-27610 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H April 6, 2023
Simple Newsletter Plugin – Noptin <= 1.10.3 - Unauthenticated CSV Injection CVE-2022-46803 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N January 27, 2023
IP Blacklist Cloud <= 5.00 - Authenticated (Administrator+) SQL Injection CVE-2022-43462 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 24, 2022
Search Logger <= 0.9 - Authenticated (Administrator+) SQL Injection CVE-2022-3131 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H September 20, 2022

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation