🧹It's time for some spring cleaning! All researchers earn over 6.25x our normal bounty rates, through May 27th, 2024, when Wordfence handles responsible disclosure for our Spring Cleaning Bug Extravaganza! Learn more about our bug bounty program
Register as a researcher and submit your vulnerabilities today!

Wordfence Intelligence > Vulnerability Researchers > Rio Darmawan

Rio Darmawan

Organization: Zerobyte

All Time Ranking

190

All Time Discoveries

Showing 81-100 of 190 Vulnerabilities

GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush

4.3

CVE-2023-25450

Mar 8, 2023

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Reusable Blocks Extended <= 0.9 - Cross-Site Request Forgery via reblex_reusable_screen_block_pattern_registration

4.3

CVE-2023-27611

Mar 13, 2023

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Modern Footnotes <= 1.4.15 - Authenticated (Administrator+) Stored Cross-Site Scripting

4.4

CVE-2023-28423

Mar 14, 2023

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Google XML Sitemap for Images <= 2.1.3 - Cross-Site Request Forgery via image_sitemap_generate

4.3

CVE-2023-28173

Mar 14, 2023

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CF7 Invisible reCAPTCHA <= 1.3.3 - Cross-Site Request Forgery via vsz_cf7_invisible_recaptcha_page

4.3

CVE-2023-28167

Mar 14, 2023

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Slideshow Gallery LITE <= 1.7.6 - Cross-Site Request Forgery via admin_galleries

4.3

CVE-2023-28497

Mar 15, 2023

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Slideshow Gallery LITE <= 1.7.6 - Cross-Site Request Forgery via admin_slides

4.3

CVE-2023-28497

Mar 15, 2023

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

SMTP2GO <= 1.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings

4.4

CVE-2023-28496

Mar 16, 2023

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Team Member <= 4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via new_style_name

6.4

CVE-2023-23647

Mar 21, 2023

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

VigilanTor <= 1.3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting

4.4

CVE-2023-28695

Mar 21, 2023

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Pagination by BestWebSoft <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

4.4

CVE-2023-28778

Mar 27, 2023

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Review Stream <= 1.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting

4.4

CVE-2023-28774

Mar 27, 2023

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

MS-Reviews <= 1.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting

6.4

CVE-2023-0424

Mar 28, 2023

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Premmerce Redirect Manager <= 1.0.10 - Cross-Site Request Forgery via deleteRedirect()

4.3

CVE-2023-23787

Mar 30, 2023

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Premmerce Redirect Manager <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting

4.4

CVE-2023-23789

Mar 30, 2023

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Custom More Link Complete <= 1.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

4.4

CVE-2023-23788

Mar 30, 2023

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

4.4

CVE ID Unknown

Mar 31, 2023

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

4.4

CVE-2023-23812

Mar 31, 2023

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Optin Forms <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

4.4

CVE-2023-29434

Apr 6, 2023

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

SimpleModal Contact Form (SMCF) <= 1.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting

4.4

CVE-2023-29438

Apr 6, 2023

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Title	CVE ID	CVSS	Vector	Date
GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush	CVE-2023-25450	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 8, 2023
Reusable Blocks Extended <= 0.9 - Cross-Site Request Forgery via reblex_reusable_screen_block_pattern_registration	CVE-2023-27611	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L	March 13, 2023
Modern Footnotes <= 1.4.15 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-28423	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	March 14, 2023
Google XML Sitemap for Images <= 2.1.3 - Cross-Site Request Forgery via image_sitemap_generate	CVE-2023-28173	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 14, 2023
CF7 Invisible reCAPTCHA <= 1.3.3 - Cross-Site Request Forgery via vsz_cf7_invisible_recaptcha_page	CVE-2023-28167	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 14, 2023
Slideshow Gallery LITE <= 1.7.6 - Cross-Site Request Forgery via admin_galleries	CVE-2023-28497	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L	March 15, 2023
Slideshow Gallery LITE <= 1.7.6 - Cross-Site Request Forgery via admin_slides	CVE-2023-28497	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L	March 15, 2023
SMTP2GO <= 1.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings	CVE-2023-28496	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	March 16, 2023
Team Member <= 4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via new_style_name	CVE-2023-23647	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	March 21, 2023
VigilanTor <= 1.3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-28695	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	March 21, 2023
Pagination by BestWebSoft <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-28778	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	March 27, 2023
Review Stream <= 1.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-28774	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	March 27, 2023
MS-Reviews <= 1.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting	CVE-2023-0424	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	March 28, 2023
Premmerce Redirect Manager <= 1.0.10 - Cross-Site Request Forgery via deleteRedirect()	CVE-2023-23787	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 30, 2023
Premmerce Redirect Manager <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-23789	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	March 30, 2023
Custom More Link Complete <= 1.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-23788	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	March 30, 2023
Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting		4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	March 31, 2023
Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-23812	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	March 31, 2023
Optin Forms <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-29434	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	April 6, 2023
SimpleModal Contact Form (SMCF) <= 1.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-29438	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	April 6, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation