Wordfence Intelligence   >   Vulnerability Researchers   >   Mika

Mika

4
All Time Ranking
305
All Time Discoveries

Showing 81-100 of 305 Vulnerabilities

AtomChat <= 1.1.4 - Missing Authorization via credits REST API Endpoint
5.3
CVE-2023-46606
Oct 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
KD Coming Soon <= 1.7 - Unauthenticated PHP Object Injection via cetitle
8.1
CVE-2023-46615
Oct 24, 2023
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
FeedFocal <= 1.2.2 - Missing Authorization via feedfocal_api_setup REST function
5.3
CVE-2023-46609
Oct 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
DoLogin Security <= 3.7.1 - Missing Authorization via REST Endpoints
6.5
CVE-2023-46608
Oct 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Convertful – Your Ultimate On-Site Conversion Tool <= 2.5 - Missing Authorization via add_woo_coupon
5.3
CVE-2023-46605
Oct 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Motors – Car Dealer & Classified Ads <= 1.4.6 - Server Side Request Forgery
7.2
CVE-2023-46207
Oct 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Motors – Car Dealer & Classified Ads <= 1.4.6 - Reflected Cross-Site Scripting
6.1
CVE-2023-46208
Oct 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Novo-Map : your WP posts on custom google maps <= 1.1.2 - Cross-Site Request Forgery
4.3
CVE-2023-46190
Oct 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Appointment Calendar <= 2.9.6 - Cross-Site Request Forgery
5.4
CVE-2023-46198
Oct 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Headline Analyzer <= 1.3.1 - Missing Authorization via REST APIs
6.5
CVE-2023-46195
Oct 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
RumbleTalk Live Group Chat <= 6.1.9 - Missing Authorization via handleRequest
7.6
CVE-2023-45828
Oct 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Remote Content Shortcode <= 1.5 - Authenticated(Contributor+) Local File Inclusion via shortcode
6.3
CVE-2023-45652
Oct 12, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
HTML5 Maps <= 1.7.1.4 - Cross-Site Request Forgery
4.3
CVE-2023-45650
Oct 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
PDF Block <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2023-45646
Oct 12, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Video Playlist For YouTube <= 6.1 - Cross-Site Request Forgery
4.3
CVE-2023-45653
Oct 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Post Gallery <= 2.3.12 - Cross-Site Request Forgery
4.3
CVE-2023-45752
Oct 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
PixFields <= 0.7.0 - Cross-Site Request Forgery
4.3
CVE-2023-45655
Oct 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Lazy Load for Videos <= 2.18.2 - Cross-Site Request Forgery
4.3
CVE-2023-45656
Oct 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Comments Ratings <= 1.1.7 - Cross-Site Request Forgery
4.3
CVE-2023-45654
Oct 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Simple URLs <= 120 - Cross-Site Request Forgery via Multiple AJAX Actions
5.4
CVE-2023-45606
Oct 11, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Title CVE ID CVSS Vector Date
AtomChat <= 1.1.4 - Missing Authorization via credits REST API Endpoint CVE-2023-46606 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N October 24, 2023
KD Coming Soon <= 1.7 - Unauthenticated PHP Object Injection via cetitle CVE-2023-46615 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H October 24, 2023
FeedFocal <= 1.2.2 - Missing Authorization via feedfocal_api_setup REST function CVE-2023-46609 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N October 24, 2023
DoLogin Security <= 3.7.1 - Missing Authorization via REST Endpoints CVE-2023-46608 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N October 24, 2023
Convertful – Your Ultimate On-Site Conversion Tool <= 2.5 - Missing Authorization via add_woo_coupon CVE-2023-46605 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N October 24, 2023
Motors – Car Dealer & Classified Ads <= 1.4.6 - Server Side Request Forgery CVE-2023-46207 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N October 19, 2023
Motors – Car Dealer & Classified Ads <= 1.4.6 - Reflected Cross-Site Scripting CVE-2023-46208 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 19, 2023
Novo-Map : your WP posts on custom google maps <= 1.1.2 - Cross-Site Request Forgery CVE-2023-46190 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N October 18, 2023
Appointment Calendar <= 2.9.6 - Cross-Site Request Forgery CVE-2023-46198 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 18, 2023
Headline Analyzer <= 1.3.1 - Missing Authorization via REST APIs CVE-2023-46195 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N October 18, 2023
RumbleTalk Live Group Chat <= 6.1.9 - Missing Authorization via handleRequest CVE-2023-45828 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L October 13, 2023
Remote Content Shortcode <= 1.5 - Authenticated(Contributor+) Local File Inclusion via shortcode CVE-2023-45652 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L October 12, 2023
HTML5 Maps <= 1.7.1.4 - Cross-Site Request Forgery CVE-2023-45650 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N October 12, 2023
PDF Block <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-45646 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 12, 2023
Video Playlist For YouTube <= 6.1 - Cross-Site Request Forgery CVE-2023-45653 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N October 12, 2023
Post Gallery <= 2.3.12 - Cross-Site Request Forgery CVE-2023-45752 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N October 12, 2023
PixFields <= 0.7.0 - Cross-Site Request Forgery CVE-2023-45655 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N October 12, 2023
Lazy Load for Videos <= 2.18.2 - Cross-Site Request Forgery CVE-2023-45656 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N October 12, 2023
Comments Ratings <= 1.1.7 - Cross-Site Request Forgery CVE-2023-45654 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N October 12, 2023
Simple URLs <= 120 - Cross-Site Request Forgery via Multiple AJAX Actions CVE-2023-45606 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 11, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation