Wordfence Intelligence   >   Vulnerability Researchers   >   Ram

Ram

Organization: Wordfence

15
All Time Ranking
149
All Time Discoveries

1 Achievement

Learn more about Achievements
Wordfence Vulnerability Researcher
Wordfence Vulnerability Researcher
November 8, 2023
Learn more Learn more about Achievements

Showing 61-80 of 149 Vulnerabilities

DethemeKit For Elementor <= 1.5.5.4 - Authenticated Stored Cross-Site Scripting
5.4
CVE-2021-24270
Apr 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Elementor Addon Elements <= 1.11.1 - Stored Cross-Site Scripting
5.4
CVE-2021-24259
Apr 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
All-in-One Addons for Elementor - WidgetKit <= 2.3.9 - Contributor+ Stored Cross-Site Scripting
6.4
CVE-2021-24267
Apr 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Elementor Header & Footer Builder <= 1.5.7 - Stored Cross-Site Scripting
6.4
CVE-2021-24256
Apr 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Ultimate Addons for Elementor < 1.30.0 - Stored Cross-Site Scripting
5.4
CVE-2021-24271
Apr 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Livemesh Addons for Elementor <= 6.7.1- Contributor+ Stored Cross-Site Scripting
5.4
CVE-2021-24260
Apr 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
HT Mega - Absolute Addons for Elementor Page Builder <= 1.5.5 - Contributor+ Stored Cross-Site Scripting
5.4
CVE-2021-24261
Apr 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Image Hover Effects – Elementor Addon <= 1.3.3 - Authenticated Stored Cross-Site Scripting
6.4
CVE-2021-24264
Apr 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Sina Extension for Elementor <= 3.3.11 - Stored Cross-Site Scripting
5.4
CVE-2021-24269
Apr 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Essential Addons for Elementor Lite <= 4.5.3 - Cross-Site Scripting
5.4
CVE-2021-24255
Apr 13, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Clever Addons for Elementor <=2.0.15 - Stored Cross-Site Scripting
6.4
CVE-2021-24273
Apr 15, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Happy Addons for Elementor <= 2.23.0 & Pro Version < 1.17.0 - Stored Cross-Site Scripting
6.4
CVE-2021-24292
Apr 26, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WP Statistics <= 13.0.7 - Unauthenticated SQL Injection
7.5
CVE-2021-24340
May 19, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Fancy Product Designer <= 4.6.8 - Unauthenticated Arbitrary File Upload
9.8
CVE-2021-24370
Jun 1, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP Fluent Forms < 3.6.67 - Stored Cross-Site Scripting
8.8
CVE-2021-34620
Jun 16, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Google Language Translator <= 6.0.9 - Reflected Cross-Site Scripting
7.1
CVE ID Unknown
Jul 21, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
WordPress Download Manager <= 3.1.24 - Authenticated File Upload
7.5
CVE-2021-34639
Jul 29, 2021
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
WordPress Download Manager <= 3.1.24 - Cross-Site Scripting
6.5
CVE-2021-34638
Jul 29, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Nested Pages <= 3.1.15 - Open Redirect
4.7
CVE-2021-38343
Aug 25, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
Nested Pages <= 3.1.15 - Cross-Site Request Forgery to Arbitrary Post Deletion and Modification
8.1
CVE-2021-38342
Aug 25, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Title CVE ID CVSS Vector Date
DethemeKit For Elementor <= 1.5.5.4 - Authenticated Stored Cross-Site Scripting CVE-2021-24270 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N April 13, 2021
Elementor Addon Elements <= 1.11.1 - Stored Cross-Site Scripting CVE-2021-24259 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N April 13, 2021
All-in-One Addons for Elementor - WidgetKit <= 2.3.9 - Contributor+ Stored Cross-Site Scripting CVE-2021-24267 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 13, 2021
Elementor Header & Footer Builder <= 1.5.7 - Stored Cross-Site Scripting CVE-2021-24256 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 13, 2021
Ultimate Addons for Elementor < 1.30.0 - Stored Cross-Site Scripting CVE-2021-24271 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N April 13, 2021
Livemesh Addons for Elementor <= 6.7.1- Contributor+ Stored Cross-Site Scripting CVE-2021-24260 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N April 13, 2021
HT Mega - Absolute Addons for Elementor Page Builder <= 1.5.5 - Contributor+ Stored Cross-Site Scripting CVE-2021-24261 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N April 13, 2021
Image Hover Effects – Elementor Addon <= 1.3.3 - Authenticated Stored Cross-Site Scripting CVE-2021-24264 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 13, 2021
Sina Extension for Elementor <= 3.3.11 - Stored Cross-Site Scripting CVE-2021-24269 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N April 13, 2021
Essential Addons for Elementor Lite <= 4.5.3 - Cross-Site Scripting CVE-2021-24255 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N April 13, 2021
Clever Addons for Elementor <=2.0.15 - Stored Cross-Site Scripting CVE-2021-24273 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 15, 2021
Happy Addons for Elementor <= 2.23.0 & Pro Version < 1.17.0 - Stored Cross-Site Scripting CVE-2021-24292 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 26, 2021
WP Statistics <= 13.0.7 - Unauthenticated SQL Injection CVE-2021-24340 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N May 19, 2021
Fancy Product Designer <= 4.6.8 - Unauthenticated Arbitrary File Upload CVE-2021-24370 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 1, 2021
WP Fluent Forms < 3.6.67 - Stored Cross-Site Scripting CVE-2021-34620 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H June 16, 2021
Google Language Translator <= 6.0.9 - Reflected Cross-Site Scripting 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L July 21, 2021
WordPress Download Manager <= 3.1.24 - Authenticated File Upload CVE-2021-34639 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H July 29, 2021
WordPress Download Manager <= 3.1.24 - Cross-Site Scripting CVE-2021-34638 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N July 29, 2021
Nested Pages <= 3.1.15 - Open Redirect CVE-2021-38343 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N August 25, 2021
Nested Pages <= 3.1.15 - Cross-Site Request Forgery to Arbitrary Post Deletion and Modification CVE-2021-38342 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H August 25, 2021

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation