Wordfence Intelligence   >   Vulnerability Researchers   >   Rafshanzani Suhada

Rafshanzani Suhada

31
All Time Ranking
93
All Time Discoveries

2 Achievements

Learn more about Achievements
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
January 4, 2024
Submitted 1 Vulnerability
Submitted 1 Vulnerability
November 30, 2023
Learn more Learn more about Achievements

Showing 41-60 of 93 Vulnerabilities

MasterStudy LMS <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2023-35090
Jun 15, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Photo Gallery <= 1.8.15 - Missing Authorization
4.3
CVE-2023-33995
Jun 2, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Groundhogg <= 2.7.11 - Cross-Site Request Forgery
5.4
CVE-2023-34178
May 30, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Groundhogg <= 2.7.11 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-34179
May 30, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Layer Slider <= 1.1.9.7 - Cross-Site Request Forgery via save_slide_ajax
4.3
CVE-2023-23671
Apr 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Simple Job Board <= 2.10.3 - Cross-Site Request Forgery via sjb_save_settings_section
4.3
CVE-2023-29440
Apr 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
User Registration <= 2.3.2.1 - Missing Authorization via send_test_email
5.3
CVE-2023-29429
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Connections Business Directory <= 10.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
5.4
CVE-2023-29437
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Filebird <= 5.1.4 - Missing Authorization via resAdminPermissionsCheck
5.4
CVE-2023-25966
Mar 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Easy Table of Contents <= 2.0.45.2 - Missing Authorization via eztoc_reset_options_to_default
5.4
CVE-2023-25469
Mar 21, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Klaviyo <= 3.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2023-0874
Mar 20, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Site Reviews <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
6.4
CVE-2023-27612
Mar 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Robo Gallery <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
6.4
CVE-2023-27620
Mar 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Site Reviews <= 6.5.1 - Missing Authorization
5.4
CVE-2023-27625
Mar 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Data Tables Generator by Supsystic <= 1.10.25 - Missing Authorization
6.3
CVE-2023-25043
Mar 13, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
GiveWP <= 2.25.1 - Authenticated (Contributor+) Arbitrary Content Deletion
5.4
CVE-2023-23672
Mar 10, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
GiveWP <= 2.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via give_form_grid shortcode
6.4
CVE-2023-23668
Mar 8, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
GiveWP <= 2.25.1 - Unauthenticated CSV Injection
8.3
CVE-2023-22719
Mar 8, 2023
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
KB Support <= 1.5.84 - Authenticated (Subscriber+) CSV Injection
4.4
CVE-2023-25983
Feb 24, 2023
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
6.4
CVE-2023-26013
Feb 21, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
MasterStudy LMS <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-35090 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N June 15, 2023
Photo Gallery <= 1.8.15 - Missing Authorization CVE-2023-33995 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N June 2, 2023
Groundhogg <= 2.7.11 - Cross-Site Request Forgery CVE-2023-34178 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N May 30, 2023
Groundhogg <= 2.7.11 - Authenticated (Administrator+) SQL Injection CVE-2023-34179 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 30, 2023
Layer Slider <= 1.1.9.7 - Cross-Site Request Forgery via save_slide_ajax CVE-2023-23671 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 19, 2023
Simple Job Board <= 2.10.3 - Cross-Site Request Forgery via sjb_save_settings_section CVE-2023-29440 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 7, 2023
User Registration <= 2.3.2.1 - Missing Authorization via send_test_email CVE-2023-29429 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 6, 2023
Connections Business Directory <= 10.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-29437 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N April 6, 2023
Filebird <= 5.1.4 - Missing Authorization via resAdminPermissionsCheck CVE-2023-25966 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N March 27, 2023
Easy Table of Contents <= 2.0.45.2 - Missing Authorization via eztoc_reset_options_to_default CVE-2023-25469 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N March 21, 2023
Klaviyo <= 3.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-0874 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 20, 2023
Site Reviews <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVE-2023-27612 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 13, 2023
Robo Gallery <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes CVE-2023-27620 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 13, 2023
Site Reviews <= 6.5.1 - Missing Authorization CVE-2023-27625 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N March 13, 2023
Data Tables Generator by Supsystic <= 1.10.25 - Missing Authorization CVE-2023-25043 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L March 13, 2023
GiveWP <= 2.25.1 - Authenticated (Contributor+) Arbitrary Content Deletion CVE-2023-23672 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L March 10, 2023
GiveWP <= 2.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via give_form_grid shortcode CVE-2023-23668 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 8, 2023
GiveWP <= 2.25.1 - Unauthenticated CSV Injection CVE-2023-22719 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H March 8, 2023
KB Support <= 1.5.84 - Authenticated (Subscriber+) CSV Injection CVE-2023-25983 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N February 24, 2023
Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes CVE-2023-26013 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N February 21, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation