Wordfence Intelligence   >   Vulnerability Researchers   >   Shreya Pohekar

Shreya Pohekar

55
All Time Ranking
49
All Time Discoveries

Showing 21-40 of 49 Vulnerabilities

Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url
7.2
CVE-2023-1124
Mar 13, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Simple File List <= 6.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-1025
Feb 28, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Custom Add User <= 2.0.2 - Reflected Cross-Site Scripting
6.1
CVE-2023-0043
Feb 2, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Article Directory <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'publish_terms_text'
4.4
CVE-2023-0422
Mar 17, 2022
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Cookie Notification Plugin for WordPress < 1.0.9 - SQL Injection
7.2
CVE-2021-24858
Dec 27, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Unlimited PopUps <= 4.5.3 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24631
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
SpiderCatalog <= 1.7.3 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24625
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Wow Forms – create any form with custom style <= 3.1.3 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24628
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Schreikasten <= 0.14.18 - Authenticated (Author+) SQL Injection
8.8
CVE-2021-24630
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Post Content XMLRPC <= 1.0 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24629
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Chameleon CSS <= 1.2 - Cross-Site Request Forgery
8.8
CVE-2021-24626
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Broken Link Manager <= 0.6.5 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24550
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Paytm – Donation Plugin <= 1.3.2 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24554
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AceIDE <= 2.6.2 - Authenticated (Admin+) Arbitrary File Read
4.9
CVE-2021-24549
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Email Subscriber <= 1.1 - Stored Cross-Site Scripting
6.1
CVE-2021-24556
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Timeline Calendar <= 1.2 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24553
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Simple Events Calendar <= 1.4.0 - Authenticated SQL Injection
7.2
CVE-2021-24552
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Project Status <= 1.6 - Reflected Cross-Site Scripting
5.4
CVE-2021-24558
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Edit Comments <= 0.3 - Unauthenticated SQL Injection
9.8
CVE-2021-24551
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
M-vSlider <= 2.1.3 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24557
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url CVE-2023-1124 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 13, 2023
Simple File List <= 6.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-1025 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N February 28, 2023
Custom Add User <= 2.0.2 - Reflected Cross-Site Scripting CVE-2023-0043 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 2, 2023
Article Directory <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'publish_terms_text' CVE-2023-0422 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 17, 2022
Cookie Notification Plugin for WordPress < 1.0.9 - SQL Injection CVE-2021-24858 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 27, 2021
Unlimited PopUps <= 4.5.3 - Authenticated (Admin+) SQL Injection CVE-2021-24631 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 7, 2021
SpiderCatalog <= 1.7.3 - Authenticated (Admin+) SQL Injection CVE-2021-24625 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Wow Forms – create any form with custom style <= 3.1.3 - Authenticated (Admin+) SQL Injection CVE-2021-24628 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Schreikasten <= 0.14.18 - Authenticated (Author+) SQL Injection CVE-2021-24630 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Post Content XMLRPC <= 1.0 - Authenticated (Admin+) SQL Injection CVE-2021-24629 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Chameleon CSS <= 1.2 - Cross-Site Request Forgery CVE-2021-24626 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Broken Link Manager <= 0.6.5 - Authenticated (Admin+) SQL Injection CVE-2021-24550 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021
Paytm – Donation Plugin <= 1.3.2 - Authenticated (Admin+) SQL Injection CVE-2021-24554 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021
AceIDE <= 2.6.2 - Authenticated (Admin+) Arbitrary File Read CVE-2021-24549 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N July 24, 2021
Email Subscriber <= 1.1 - Stored Cross-Site Scripting CVE-2021-24556 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 24, 2021
Timeline Calendar <= 1.2 - Authenticated (Admin+) SQL Injection CVE-2021-24553 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021
Simple Events Calendar <= 1.4.0 - Authenticated SQL Injection CVE-2021-24552 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021
Project Status <= 1.6 - Reflected Cross-Site Scripting CVE-2021-24558 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N July 24, 2021
Edit Comments <= 0.3 - Unauthenticated SQL Injection CVE-2021-24551 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 24, 2021
M-vSlider <= 2.1.3 - Authenticated (Admin+) SQL Injection CVE-2021-24557 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation