Wordfence Intelligence   >   Vulnerability Researchers   >   Rio Darmawan

Rio Darmawan

Organization: Zerobyte

13
All Time Ranking
190
All Time Discoveries

Showing 61-80 of 190 Vulnerabilities

Advanced Text Widget <= 2.1.2 - Missing Authorization via atw_dismiss_admin_notice
5.3
CVE-2023-26520
Feb 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Social Auto Poster <= 2.1.4 - Cross-Site Request Forgery to Plugin Settings Reset
4.3
CVE-2023-26532
Feb 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
XML Sitemap Generator for Google <= 1.3.3 - Cross-Site Request Forgery to Plugin Settings Changes
4.3
CVE-2023-26514
Feb 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Advanced Text Widget <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-26539
Feb 28, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
WP No External Links <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scritping
4.4
CVE-2023-26537
Feb 28, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Quiz And Survey Master <= 8.0.10 - Cross-Site Request Forgery to Quiz Restoration
4.3
CVE-2023-26524
Feb 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Rus-To-Lat <= 0.3 - Cross-Site Request Forgery to Plugins Options Changes
4.3
CVE-2023-25470
Feb 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP TFeed <= 1.6.9 - Cross-Site Request Forgery via aptf_delete_cache
4.3
CVE-2023-26518
Feb 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WpStream – Live Streaming, Video on Demand, Pay Per View <= 4.4.10 - Cross-Site Request Forgery via wpstream_settings
4.3
CVE-2023-27458
Mar 2, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Button Generator – easily Button Builder <= 2.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-27452
Mar 2, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Add Expires Headers & Optimized Minify <= 2.7 - Cross-Site Request Forgery via [placeholder]
4.3
CVE-2023-27457
Mar 2, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
JCH Optimize <= 3.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
4.4
CVE-2023-25491
Mar 2, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
FareHarbor for WordPress <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-25021
Mar 3, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Blog Floating Button <= 1.4.12 - Cross-Site Request Forgery
4.3
CVE-2023-27445
Mar 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
New Adman <= 1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-27439
Mar 3, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Classic Editor and Classic Widgets <= 1.2.5 - Cross-Site Request Forgery via render_settings_page
4.3
CVE-2023-27434
Mar 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Elegant Custom Fonts <= 1.0 - Cross-Site Request Forgery
4.3
CVE-2023-27436
Mar 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
New Adman <= 1.6.8 - Cross-Site Request Forgery via plugin_menu
4.3
CVE-2023-27441
Mar 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CPO Content Types <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-25451
Mar 3, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush
4.3
CVE-2023-25450
Mar 8, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Advanced Text Widget <= 2.1.2 - Missing Authorization via atw_dismiss_admin_notice CVE-2023-26520 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N February 28, 2023
Social Auto Poster <= 2.1.4 - Cross-Site Request Forgery to Plugin Settings Reset CVE-2023-26532 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L February 28, 2023
XML Sitemap Generator for Google <= 1.3.3 - Cross-Site Request Forgery to Plugin Settings Changes CVE-2023-26514 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 28, 2023
Advanced Text Widget <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-26539 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 28, 2023
WP No External Links <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scritping CVE-2023-26537 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 28, 2023
Quiz And Survey Master <= 8.0.10 - Cross-Site Request Forgery to Quiz Restoration CVE-2023-26524 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 28, 2023
Rus-To-Lat <= 0.3 - Cross-Site Request Forgery to Plugins Options Changes CVE-2023-25470 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 28, 2023
WP TFeed <= 1.6.9 - Cross-Site Request Forgery via aptf_delete_cache CVE-2023-26518 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 28, 2023
WpStream – Live Streaming, Video on Demand, Pay Per View <= 4.4.10 - Cross-Site Request Forgery via wpstream_settings CVE-2023-27458 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 2, 2023
Button Generator – easily Button Builder <= 2.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-27452 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 2, 2023
Add Expires Headers & Optimized Minify <= 2.7 - Cross-Site Request Forgery via [placeholder] CVE-2023-27457 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 2, 2023
JCH Optimize <= 3.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings CVE-2023-25491 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 2, 2023
FareHarbor for WordPress <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25021 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 3, 2023
Blog Floating Button <= 1.4.12 - Cross-Site Request Forgery CVE-2023-27445 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 3, 2023
New Adman <= 1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-27439 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 3, 2023
Classic Editor and Classic Widgets <= 1.2.5 - Cross-Site Request Forgery via render_settings_page CVE-2023-27434 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 3, 2023
Elegant Custom Fonts <= 1.0 - Cross-Site Request Forgery CVE-2023-27436 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 3, 2023
New Adman <= 1.6.8 - Cross-Site Request Forgery via plugin_menu CVE-2023-27441 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 3, 2023
CPO Content Types <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25451 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 3, 2023
GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush CVE-2023-25450 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 8, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation