Wordfence Intelligence   >   Vulnerability Researchers   >   SeoHee Kang

SeoHee Kang

230
All Time Ranking
9
All Time Discoveries

9 Vulnerabilities

Admin Dashboard RSS Feed <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-38725
Jul 11, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Job Board Manager <= 2.1.57 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2024-38722
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WP To Do <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-37539
Jul 6, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WS Contact Form <= 1.3.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-37537
Jul 5, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Dextaz Ping <= 0.65 - Authenticated (Admin+) Remote Code Execution
7.2
CVE-2024-34792
May 20, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Z-Downloads <= 1.11.3 - Authenticated (Admin+) Arbitrary File Upload
9.1
CVE-2024-34555
May 10, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Save as Image <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-31931
Apr 10, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Save as PDF <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-31930
Apr 10, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Auto Poster <= 1.2 - Authenticated (Administrator+) Arbitrary File Upload
9.1
CVE-2024-31345
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Admin Dashboard RSS Feed <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-38725 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N July 11, 2024
Job Board Manager <= 2.1.57 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-38722 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N July 11, 2024
WP To Do <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-37539 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N July 6, 2024
WS Contact Form <= 1.3.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-37537 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N July 5, 2024
Dextaz Ping <= 0.65 - Authenticated (Admin+) Remote Code Execution CVE-2024-34792 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 20, 2024
Z-Downloads <= 1.11.3 - Authenticated (Admin+) Arbitrary File Upload CVE-2024-34555 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H May 10, 2024
Save as Image <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-31931 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 10, 2024
Save as PDF <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-31930 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 10, 2024
Auto Poster <= 1.2 - Authenticated (Administrator+) Arbitrary File Upload CVE-2024-31345 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H April 5, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation