Wordfence Intelligence   >   Vulnerability Researchers   >   Mika

Mika

4
All Time Ranking
305
All Time Discoveries

Showing 261-280 of 305 Vulnerabilities

Uncanny Toolkit for LearnDash <= 3.6.4.3 - Open Redirect
4.3
CVE-2023-34020
Jun 1, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Report Post <= 2.1.2 - Cross-Site Request Forgery
4.3
CVE-2023-34171
May 31, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
LH Password Changer <= 1.55 - Cross-Site Request Forgery
4.3
CVE-2023-34182
May 30, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Flickr Justified Gallery <= 3.5 - Cross-Site Request Forgery via fjgwpp_settings()
4.3
CVE-2023-25473
May 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Tiles <= 1.1.2 - Cross-Site Request Forgery
4.3
CVE-2023-25482
May 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Custom Cursors < 3.2 - Cross-Site Request Forgery
4.3
CVE-2023-32739
May 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Google Site Verification plugin using Meta Tag <= 1.2 - Cross-Site Request Forgery
4.3
CVE-2023-32514
May 10, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Video XML Sitemap Generator <= 1.0.0 - Cross-Site Request Forgery via video_sitemap_generate
4.3
CVE-2023-31089
Apr 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Chronosly Events Calendar <= 2.6.2 - Cross-Site Request Forgery via plugin_settings_page
4.3
CVE-2023-31093
Apr 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Album Gallery – WordPress Gallery <= 1.4.9 - Cross-Site Request Forgery via album-gallery-column-settings.php
4.3
CVE-2023-23646
Apr 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Database Collation Fix <= 1.2.7 - Cross-Site Request Forgery via admin_page
4.3
CVE-2023-23997
Apr 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Reroute Email <= 1.4.6 - Cross-Site Request Forgery
4.3
CVE-2023-27606
Apr 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
PixTypes <= 1.4.14 - Cross-Site Request Forgery
4.3
CVE-2023-25487
Apr 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
tencentcloud-cos <= 1.0.7 - Missing Authorization via AJAX actions
4.3
CVE-2023-29433
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
PHP Compatibility Checker <= 1.5.2 - Cross-Site Request Forgery
4.3
CVE-2023-24421
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Comment Reply Notification <= 1.4 - Cross-Site Request Forgery
4.3
CVE-2023-25051
Apr 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Wp Ultimate Review <= 2.0.3 - Cross-Site Request Forgery
4.3
CVE-2023-28987
Mar 29, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
BigContact <= 1.5.8 - Cross-Site Request Forgery leading to Plugin Settings Updates
4.3
CVE-2023-22694
Mar 21, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weather Station <= 3.8.11 - Cross-Site Request Forgery
4.3
CVE-2023-25478
Mar 21, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Google XML Sitemap for Mobile <= 1.6.1 - Cross-Site Request Forgery via mobile_sitemap_generate
4.3
CVE-2023-23869
Mar 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Uncanny Toolkit for LearnDash <= 3.6.4.3 - Open Redirect CVE-2023-34020 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 1, 2023
WP Report Post <= 2.1.2 - Cross-Site Request Forgery CVE-2023-34171 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N May 31, 2023
LH Password Changer <= 1.55 - Cross-Site Request Forgery CVE-2023-34182 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N May 30, 2023
Flickr Justified Gallery <= 3.5 - Cross-Site Request Forgery via fjgwpp_settings() CVE-2023-25473 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N May 24, 2023
WP Tiles <= 1.1.2 - Cross-Site Request Forgery CVE-2023-25482 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N May 24, 2023
WP Custom Cursors < 3.2 - Cross-Site Request Forgery CVE-2023-32739 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N May 15, 2023
Google Site Verification plugin using Meta Tag <= 1.2 - Cross-Site Request Forgery CVE-2023-32514 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N May 10, 2023
Video XML Sitemap Generator <= 1.0.0 - Cross-Site Request Forgery via video_sitemap_generate CVE-2023-31089 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 24, 2023
Chronosly Events Calendar <= 2.6.2 - Cross-Site Request Forgery via plugin_settings_page CVE-2023-31093 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 24, 2023
Album Gallery – WordPress Gallery <= 1.4.9 - Cross-Site Request Forgery via album-gallery-column-settings.php CVE-2023-23646 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 19, 2023
Database Collation Fix <= 1.2.7 - Cross-Site Request Forgery via admin_page CVE-2023-23997 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 14, 2023
WP Reroute Email <= 1.4.6 - Cross-Site Request Forgery CVE-2023-27606 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 14, 2023
PixTypes <= 1.4.14 - Cross-Site Request Forgery CVE-2023-25487 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 7, 2023
tencentcloud-cos <= 1.0.7 - Missing Authorization via AJAX actions CVE-2023-29433 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 6, 2023
PHP Compatibility Checker <= 1.5.2 - Cross-Site Request Forgery CVE-2023-24421 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 6, 2023
Comment Reply Notification <= 1.4 - Cross-Site Request Forgery CVE-2023-25051 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 4, 2023
Wp Ultimate Review <= 2.0.3 - Cross-Site Request Forgery CVE-2023-28987 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 29, 2023
BigContact <= 1.5.8 - Cross-Site Request Forgery leading to Plugin Settings Updates CVE-2023-22694 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 21, 2023
Weather Station <= 3.8.11 - Cross-Site Request Forgery CVE-2023-25478 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 21, 2023
Google XML Sitemap for Mobile <= 1.6.1 - Cross-Site Request Forgery via mobile_sitemap_generate CVE-2023-23869 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 20, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation