Wordfence Intelligence   >   Vulnerability Researchers   >   Mika

Mika

4
All Time Ranking
305
All Time Discoveries

Showing 101-120 of 305 Vulnerabilities

Goolytics – Simple Google Analytics <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2022-3132
Sep 6, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Affiliates Manager <= 2.9.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2022-2799
Aug 16, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Opensea <= 1.0.2 - Cross-Site Scripting
5.5
CVE-2022-1228
Apr 10, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Social comments by WpDevArt <= 2.4.9 - Admin+ Stored Cross-Site Scripting
5.5
CVE-2022-0876
Apr 9, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
BulletProof Security <= 5.7 - Admin+ Stored Cross-Site Scripting
5.5
CVE-2022-0590
Feb 22, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Helpful <= 4.4.58 - Admin+ Stored Cross-Site Scripting
5.5
CVE-2021-24841
Oct 18, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Abandoned Cart Lite for WooCommerce <= 5.16.1 - Missing Authorization via multiple AJAX functions
5.4
CVE-2023-41671
Nov 28, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Appointment Calendar <= 2.9.6 - Cross-Site Request Forgery
5.4
CVE-2023-46198
Oct 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Simple URLs <= 120 - Cross-Site Request Forgery via Multiple AJAX Actions
5.4
CVE-2023-45606
Oct 11, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Urvanov Syntax Highlighter <= 2.8.33 - Cross-Site Request Forgery via init_ajax
5.4
CVE-2023-45106
Oct 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Pinpoint Booking System <= 2.9.9.4.0 - Cross-Site Request Forgery via initBackEndAJAX
5.4
CVE-2023-45270
Oct 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Simple SEO <= 2.0.25 - Cross-Site Request Forgery via multiple admin_post functions
5.4
CVE-2023-45269
Oct 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Easy WP Cleaner <= 1.9 - Cross-Site Request Forgery
5.4
CVE-2023-41697
Sep 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
PowerPress <= 11.0.6 - Authenticated (Contributor+) Server-Side Request Forgery via wp_ajax_powerpress_media_info
5.4
CVE-2023-41239
Aug 29, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking <= 3.7.1 - Cross-Site Request Forgery
5.4
CVE-2023-40561
Aug 16, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
HTTP Auth <= 0.3.2 - Cross-Site Request Forgery
5.4
CVE-2023-27435
Jul 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Saphali Woocommerce Lite <= 1.8.13 - Cross-Site Request Forgery via 'woocommerce_saphali_page_s_l'
5.4
CVE-2023-25788
Jul 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
WooCommerce Product Stock Alert <= 2.0.1 - Missing Authorization via API
5.4
CVE-2023-37971
Jul 10, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Stop Referrer Spam <= 1.3.0 - Cross-Site Request Forgery via processParameters
5.4
CVE-2023-33207
May 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Simple Page Ordering <= 2.5.0 - Missing Authorization to Information Disclosure
5.4
CVE-2023-32798
May 16, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Goolytics – Simple Google Analytics <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2022-3132 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N September 6, 2022
Affiliates Manager <= 2.9.13 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2022-2799 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N August 16, 2022
Opensea <= 1.0.2 - Cross-Site Scripting CVE-2022-1228 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N April 10, 2022
Social comments by WpDevArt <= 2.4.9 - Admin+ Stored Cross-Site Scripting CVE-2022-0876 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N April 9, 2022
BulletProof Security <= 5.7 - Admin+ Stored Cross-Site Scripting CVE-2022-0590 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N February 22, 2022
Helpful <= 4.4.58 - Admin+ Stored Cross-Site Scripting CVE-2021-24841 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N October 18, 2021
Abandoned Cart Lite for WooCommerce <= 5.16.1 - Missing Authorization via multiple AJAX functions CVE-2023-41671 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N November 28, 2023
Appointment Calendar <= 2.9.6 - Cross-Site Request Forgery CVE-2023-46198 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 18, 2023
Simple URLs <= 120 - Cross-Site Request Forgery via Multiple AJAX Actions CVE-2023-45606 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 11, 2023
Urvanov Syntax Highlighter <= 2.8.33 - Cross-Site Request Forgery via init_ajax CVE-2023-45106 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 6, 2023
Pinpoint Booking System <= 2.9.9.4.0 - Cross-Site Request Forgery via initBackEndAJAX CVE-2023-45270 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 6, 2023
Simple SEO <= 2.0.25 - Cross-Site Request Forgery via multiple admin_post functions CVE-2023-45269 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 6, 2023
Easy WP Cleaner <= 1.9 - Cross-Site Request Forgery CVE-2023-41697 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L September 5, 2023
PowerPress <= 11.0.6 - Authenticated (Contributor+) Server-Side Request Forgery via wp_ajax_powerpress_media_info CVE-2023-41239 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N August 29, 2023
WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking <= 3.7.1 - Cross-Site Request Forgery CVE-2023-40561 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L August 16, 2023
HTTP Auth <= 0.3.2 - Cross-Site Request Forgery CVE-2023-27435 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L July 26, 2023
Saphali Woocommerce Lite <= 1.8.13 - Cross-Site Request Forgery via 'woocommerce_saphali_page_s_l' CVE-2023-25788 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L July 26, 2023
WooCommerce Product Stock Alert <= 2.0.1 - Missing Authorization via API CVE-2023-37971 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N July 10, 2023
Stop Referrer Spam <= 1.3.0 - Cross-Site Request Forgery via processParameters CVE-2023-33207 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L May 18, 2023
Simple Page Ordering <= 2.5.0 - Missing Authorization to Information Disclosure CVE-2023-32798 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N May 16, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation