Wordfence Intelligence   >   Vulnerability Researchers   >   Mika

Mika

4
All Time Ranking
308
All Time Discoveries

Showing 121-140 of 308 Vulnerabilities

WP All Backup <= 2.4.3 - Cross-Site Request Forgery to Backup Storage Modification
5.4
CVE-2023-32583
May 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Post State Tags <= 2.0.6 - Cross-Site Request Forgery to Settings Reset
5.4
CVE-2023-32588
May 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Hyphenator <= 5.1.5 - Cross-Site Request Forgery to Settings Update
5.4
CVE-2023-32594
May 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Library Viewer <= 2.0.6 - Open Redirect via 'redirect_to'
5.4
CVE-2023-32101
May 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Simple Giveaways <= 2.46 - Cross-Site Request Forgery
5.4
CVE-2023-31086
Apr 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
PowerPress <= 10.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
5.4
CVE-2023-30778
Apr 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
IP Blocker Lite <= 11.1.1 - Cross-Site Request Forgery
5.4
CVE-2023-23993
Mar 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CBX Currency Converter <= 3.0.3 - Cross-Site Request Forgery leading to Plugin Settings Leakage/Changes
5.4
CVE-2023-28747
Mar 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Force First and Last Name as Display Name <= 1.2 - Cross-Site Request Forgery
5.4
CVE-2023-28419
Mar 16, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Mass Delete Unused Tags <= 2.0.0 - Cross-Site Request Forgery via plugin_mass_delete_unused_tags_init
5.4
CVE-2023-27430
Mar 10, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Auto Prune Posts <= 1.8.0 - Cross-Site Request Forgery via admin_menu
5.4
CVE-2023-27423
Mar 10, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Sheets To WP Table Live Sync <= 2.12.15 - Cross-Site Request Forgery
5.4
CVE-2023-26535
Feb 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
phpinfo() WP <= 4.0 - Cross-Site Request Forgery
5.4
CVE-2023-26542
Feb 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Admin Block Country <= 7.1.4 - Cross-Site Request Forgery via admin_block_country_initial_page
5.4
CVE-2023-24007
Feb 23, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Auto YouTube Importer <= 1.0.3 - Cross-Site Request Forgery
5.4
CVE-2023-23797
Feb 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
DNUI <= 2.8.1 - Cross-Site Request Forgery leading to Unused Image Deletion and Database Image Access
5.4
CVE-2022-47609
Jan 13, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Export Post Info <= 1.2.0 - Authenticated (Author+) CSV Injection
5.4
CVE-2022-38061
Sep 22, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
RomethemeKit For Elementor <= 1.4.1 - Missing Authorization
5.3
CVE-2024-33919
Apr 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Social Share Icons & Social Share Buttons <= 3.6.2 - Missing Authorization to Notice Dismissal
5.3
CVE-2024-32820
Apr 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WTI Like Post <= 1.4.6 - IP Spoofing
5.3
CVE-2024-33917
Apr 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
WP All Backup <= 2.4.3 - Cross-Site Request Forgery to Backup Storage Modification CVE-2023-32583 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L May 12, 2023
Post State Tags <= 2.0.6 - Cross-Site Request Forgery to Settings Reset CVE-2023-32588 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L May 12, 2023
Hyphenator <= 5.1.5 - Cross-Site Request Forgery to Settings Update CVE-2023-32594 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N May 12, 2023
Library Viewer <= 2.0.6 - Open Redirect via 'redirect_to' CVE-2023-32101 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N May 3, 2023
Simple Giveaways <= 2.46 - Cross-Site Request Forgery CVE-2023-31086 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L April 24, 2023
PowerPress <= 10.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-30778 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N April 17, 2023
IP Blocker Lite <= 11.1.1 - Cross-Site Request Forgery CVE-2023-23993 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L March 28, 2023
CBX Currency Converter <= 3.0.3 - Cross-Site Request Forgery leading to Plugin Settings Leakage/Changes CVE-2023-28747 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N March 22, 2023
Force First and Last Name as Display Name <= 1.2 - Cross-Site Request Forgery CVE-2023-28419 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N March 16, 2023
Mass Delete Unused Tags <= 2.0.0 - Cross-Site Request Forgery via plugin_mass_delete_unused_tags_init CVE-2023-27430 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L March 10, 2023
Auto Prune Posts <= 1.8.0 - Cross-Site Request Forgery via admin_menu CVE-2023-27423 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L March 10, 2023
Sheets To WP Table Live Sync <= 2.12.15 - Cross-Site Request Forgery CVE-2023-26535 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 27, 2023
phpinfo() WP <= 4.0 - Cross-Site Request Forgery CVE-2023-26542 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N February 24, 2023
Admin Block Country <= 7.1.4 - Cross-Site Request Forgery via admin_block_country_initial_page CVE-2023-24007 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L February 23, 2023
Auto YouTube Importer <= 1.0.3 - Cross-Site Request Forgery CVE-2023-23797 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L February 3, 2023
DNUI <= 2.8.1 - Cross-Site Request Forgery leading to Unused Image Deletion and Database Image Access CVE-2022-47609 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L January 13, 2023
Export Post Info <= 1.2.0 - Authenticated (Author+) CSV Injection CVE-2022-38061 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N September 22, 2022
RomethemeKit For Elementor <= 1.4.1 - Missing Authorization CVE-2024-33919 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 29, 2024
Social Share Icons & Social Share Buttons <= 3.6.2 - Missing Authorization to Notice Dismissal CVE-2024-32820 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 29, 2024
WTI Like Post <= 1.4.6 - IP Spoofing CVE-2024-33917 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 29, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation