Wordfence Intelligence   >   Vulnerability Researchers   >   Ram

Ram

Organization: Wordfence

15
All Time Ranking
149
All Time Discoveries

1 Achievement

Learn more about Achievements
Wordfence Vulnerability Researcher
Wordfence Vulnerability Researcher
November 8, 2023
Learn more Learn more about Achievements

Showing 81-100 of 149 Vulnerabilities

underConstruction <= 1.18 - Reflected Cross-Site Scripting
6.1
CVE-2021-39320
Aug 31, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Gutenberg Template Library & Redux Framework <= 4.2.1 - Incorrect Authorization Leading to Arbitrary Plugin Installation and Post Deletion
7.1
CVE-2021-38312
Sep 1, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Gutenberg Template Library & Redux Framework <= 4.2.11 - Missing Authorization to Sensitive Information Disclosure
5.3
CVE-2021-38314
Sep 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Easy Social Icons <= 3.0.8 – Reflected Cross-Site Scripting
6.1
CVE-2021-39322
Sep 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation
6.5
CVE-2021-4333
Sep 11, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Arbitrary Post Deletion
7.5
CVE-2021-42359
Sep 21, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 - Missing Authorization to Stored Cross-Site Scripting
7.6
CVE-2021-42360
Oct 4, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Brizy - Page Builder <= 2.3.11 - Stored Cross-Site Scripting
6.4
CVE-2021-38344
Oct 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Brizy Page Builder <= 2.3.11 - Authenticated File Upload and Path Traversal
8.8
CVE-2021-38346
Oct 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
HashThemes Demo Importer <= 1.1.1 - Missing Authorization to Database Wipe
8.1
CVE-2021-39333
Oct 26, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
NextScripts: Social Networks Auto-Poster <= 4.3.20 - Reflected Cross-Site Scripting
6.1
CVE-2021-38356
Nov 28, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
PHP Everywhere <= 2.0.3 - Remote Code Execution by Contributor+ users via gutenberg block
9.9
CVE-2022-24665
Jan 4, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
PHP Everywhere <= 2.0.3 - Authenticated (Contributor+) Remote Code Execution via Metabox
9.9
CVE-2022-24664
Jan 4, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
PHP Everywhere <= 2.0.3 - Remote Code Execution by Subscriber+ users via shortcode
9.9
CVE-2022-24663
Jan 4, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Header Footer Code Manager <= 1.1.16 - Reflected Cross-Site Scripting
6.1
CVE-2022-0710
Feb 18, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
BackupWordPress <= 3.12 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
4.3
CVE-2022-4931
Feb 23, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting
6.1
CVE-2022-28222
Mar 30, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting
6.1
CVE-2022-28221
Mar 30, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution
8.8
CVE-2022-1329
Apr 13, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Booking Calendar <= 9.1 - PHP Object Injection via Shortcode
8.5
CVE-2022-1463
Apr 18, 2022
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
underConstruction <= 1.18 - Reflected Cross-Site Scripting CVE-2021-39320 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 31, 2021
Gutenberg Template Library & Redux Framework <= 4.2.1 - Incorrect Authorization Leading to Arbitrary Plugin Installation and Post Deletion CVE-2021-38312 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L September 1, 2021
Gutenberg Template Library & Redux Framework <= 4.2.11 - Missing Authorization to Sensitive Information Disclosure CVE-2021-38314 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N September 1, 2021
Easy Social Icons <= 3.0.8 – Reflected Cross-Site Scripting CVE-2021-39322 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N September 1, 2021
WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation CVE-2021-4333 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N September 11, 2021
WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Arbitrary Post Deletion CVE-2021-42359 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H September 21, 2021
Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 - Missing Authorization to Stored Cross-Site Scripting CVE-2021-42360 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L October 4, 2021
Brizy - Page Builder <= 2.3.11 - Stored Cross-Site Scripting CVE-2021-38344 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N October 13, 2021
Brizy Page Builder <= 2.3.11 - Authenticated File Upload and Path Traversal CVE-2021-38346 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 13, 2021
HashThemes Demo Importer <= 1.1.1 - Missing Authorization to Database Wipe CVE-2021-39333 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H October 26, 2021
NextScripts: Social Networks Auto-Poster <= 4.3.20 - Reflected Cross-Site Scripting CVE-2021-38356 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 28, 2021
PHP Everywhere <= 2.0.3 - Remote Code Execution by Contributor+ users via gutenberg block CVE-2022-24665 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H January 4, 2022
PHP Everywhere <= 2.0.3 - Authenticated (Contributor+) Remote Code Execution via Metabox CVE-2022-24664 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H January 4, 2022
PHP Everywhere <= 2.0.3 - Remote Code Execution by Subscriber+ users via shortcode CVE-2022-24663 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H January 4, 2022
Header Footer Code Manager <= 1.1.16 - Reflected Cross-Site Scripting CVE-2022-0710 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 18, 2022
BackupWordPress <= 3.12 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure CVE-2022-4931 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N February 23, 2022
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting CVE-2022-28222 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 30, 2022
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting CVE-2022-28221 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 30, 2022
Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution CVE-2022-1329 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H April 13, 2022
Booking Calendar <= 9.1 - PHP Object Injection via Shortcode CVE-2022-1463 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H April 18, 2022

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation