Wordfence Intelligence   >   Vulnerability Researchers   >   Muhammad Daffa

Muhammad Daffa

19
All Time Ranking
127
All Time Discoveries

About

:)

2 Achievements

Learn more about Achievements
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
March 12, 2024
Submitted 1 Vulnerability
Submitted 1 Vulnerability
February 2, 2024
Learn more Learn more about Achievements

Showing 1-20 of 127 Vulnerabilities

Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook <= 1.1.12 - Authenticated (Administrator+) SQL Injection
9.1
CVE-2024-32134
Apr 12, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CBX Bookmark & Favorite <= 1.7.20 - Authenticated (Administrator+) SQL Injection
9.1
CVE-2024-32132
Apr 12, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
User Activity Log <= 1.9 - Authenticated (Administrator+) SQL Injection
9.1
CVE-2024-31356
Apr 7, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Edwiser Bridge <= 3.0.2 - Authenticated (Administrator+) SQL Injection
9.1
CVE-2024-31260
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection
9.1
CVE-2024-31116
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Paid Memberships Pro – Mailchimp Add On <= 2.3.4 - Unauthenticated Information Disclosure
5.3
CVE-2024-30523
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
WordPress Announcement & Notification Banner Plugin – Bulletin <= 3.8.5 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2024-30478
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Shariff Wrapper <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-0966
Mar 12, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Event Tickets and Registration <= 5.8.1 - Missing Authorization
4.3
CVE-2024-1053
Feb 21, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
3D FlipBook – PDF Flipbook WordPress <= 1.15.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Bookmarks
6.4
CVE-2024-1081
Feb 20, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.1 - Missing Authorization
4.3
CVE-2024-1092
Feb 2, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
PDF Flipbook, 3D Flipbook – DearFlip <= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
5.4
CVE-2024-0895
Feb 2, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Albo Pretorio Online <= 4.6.6 - Unauthenticated Sensitive Information Disclosure
5.3
CVE-2024-22301
Jan 17, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Recipe Maker For Your Food Blog from Zip Recipes <= 8.1.0 - Authenticated(Contributor+) SQL Injection
8.8
CVE-2023-52180
Dec 29, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WS Form LITE <= 1.9.170 - Authenticated(Administrator+) SQL Injection
6.6
CVE-2023-52135
Dec 28, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Events Shortcodes & Templates For The Events Calendar <= 2.3.1 - Authenticated (Contributor+) SQL Injection via shortcode
8.8
CVE-2023-52142
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Page Generator <= 1.7.1 - Authenticated(Administrator+) SQL Injection
6.6
CVE-2023-52131
Dec 28, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Most And Least Read Posts Widget <=2.5.16 - Authenticated(Contributor+) SQL Injection via Widget settings
8.8
CVE-2023-52133
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
GEO my WordPress <= 4.0.2 - Authenticated(Administrator+) SQL Injection
6.6
CVE-2023-52134
Dec 28, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal
2.7
CVE-2023-52144
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook <= 1.1.12 - Authenticated (Administrator+) SQL Injection CVE-2024-32134 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H April 12, 2024
CBX Bookmark & Favorite <= 1.7.20 - Authenticated (Administrator+) SQL Injection CVE-2024-32132 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H April 12, 2024
User Activity Log <= 1.9 - Authenticated (Administrator+) SQL Injection CVE-2024-31356 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H April 7, 2024
Edwiser Bridge <= 3.0.2 - Authenticated (Administrator+) SQL Injection CVE-2024-31260 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H April 5, 2024
10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection CVE-2024-31116 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H March 29, 2024
Paid Memberships Pro – Mailchimp Add On <= 2.3.4 - Unauthenticated Information Disclosure CVE-2024-30523 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N March 28, 2024
WordPress Announcement & Notification Banner Plugin – Bulletin <= 3.8.5 - Authenticated (Administrator+) SQL Injection CVE-2024-30478 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 28, 2024
Shariff Wrapper <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-0966 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 12, 2024
Event Tickets and Registration <= 5.8.1 - Missing Authorization CVE-2024-1053 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N February 21, 2024
3D FlipBook – PDF Flipbook WordPress <= 1.15.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Bookmarks CVE-2024-1081 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N February 20, 2024
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.1 - Missing Authorization CVE-2024-1092 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N February 2, 2024
PDF Flipbook, 3D Flipbook – DearFlip <= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-0895 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N February 2, 2024
Albo Pretorio Online <= 4.6.6 - Unauthenticated Sensitive Information Disclosure CVE-2024-22301 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N January 17, 2024
Recipe Maker For Your Food Blog from Zip Recipes <= 8.1.0 - Authenticated(Contributor+) SQL Injection CVE-2023-52180 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 29, 2023
WS Form LITE <= 1.9.170 - Authenticated(Administrator+) SQL Injection CVE-2023-52135 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H December 28, 2023
Events Shortcodes & Templates For The Events Calendar <= 2.3.1 - Authenticated (Contributor+) SQL Injection via shortcode CVE-2023-52142 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 28, 2023
Page Generator <= 1.7.1 - Authenticated(Administrator+) SQL Injection CVE-2023-52131 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H December 28, 2023
Most And Least Read Posts Widget <=2.5.16 - Authenticated(Contributor+) SQL Injection via Widget settings CVE-2023-52133 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 28, 2023
GEO my WordPress <= 4.0.2 - Authenticated(Administrator+) SQL Injection CVE-2023-52134 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H December 28, 2023
Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal CVE-2023-52144 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N December 28, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation