Wordfence Intelligence   >   Vulnerability Researchers   >   Shreya Pohekar

Shreya Pohekar

59
All Time Ranking
49
All Time Discoveries

Showing 21-40 of 49 Vulnerabilities

hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting
6.1
CVE-2023-0769
Apr 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
UserPlus <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2023-0824
Apr 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Custom Post Type and Taxonomy GUI Manager <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
6.1
CVE-2023-0420
Mar 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Amazon S3 Plugin <= 1.5 - Reflected Cross-Site Scripting
6.1
CVE-2023-0423
Mar 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Custom Add User <= 2.0.2 - Reflected Cross-Site Scripting
6.1
CVE-2023-0043
Feb 2, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Email Subscriber <= 1.1 - Stored Cross-Site Scripting
6.1
CVE-2021-24556
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Simple Giveaways <= 2.36.1 - Reflected Cross-Site Scripting
6.1
CVE-2021-24298
May 9, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Booking Manager <= 2.0.28 - Authenticated (Subscriber+) Server-Side Request Forgery
6.3
CVE-2023-1977
Apr 26, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Amr Ical Events Lists <= 6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
6.6
CVE-2023-1021
Apr 4, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N
Sendit WP Newsletter <= 2.5.1 - Authenticated (Admin+) SQL Injection
6.6
CVE-2021-24345
May 27, 2021
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url
7.2
CVE-2023-1124
Mar 13, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Cookie Notification Plugin for WordPress < 1.0.9 - SQL Injection
7.2
CVE-2021-24858
Dec 27, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Wow Forms – create any form with custom style <= 3.1.3 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24628
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
SpiderCatalog <= 1.7.3 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24625
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Post Content XMLRPC <= 1.0 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24629
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Unlimited PopUps <= 4.5.3 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24631
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Broken Link Manager <= 0.6.5 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24550
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Paytm – Donation Plugin <= 1.3.2 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24554
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Timeline Calendar <= 1.2 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24553
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Simple Events Calendar <= 1.4.0 - Authenticated SQL Injection
7.2
CVE-2021-24552
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting CVE-2023-0769 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 12, 2023
UserPlus <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2023-0824 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 12, 2023
Custom Post Type and Taxonomy GUI Manager <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting CVE-2023-0420 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 28, 2023
WordPress Amazon S3 Plugin <= 1.5 - Reflected Cross-Site Scripting CVE-2023-0423 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 20, 2023
Custom Add User <= 2.0.2 - Reflected Cross-Site Scripting CVE-2023-0043 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 2, 2023
Email Subscriber <= 1.1 - Stored Cross-Site Scripting CVE-2021-24556 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 24, 2021
Simple Giveaways <= 2.36.1 - Reflected Cross-Site Scripting CVE-2021-24298 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 9, 2021
Booking Manager <= 2.0.28 - Authenticated (Subscriber+) Server-Side Request Forgery CVE-2023-1977 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L April 26, 2023
Amr Ical Events Lists <= 6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-1021 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N April 4, 2023
Sendit WP Newsletter <= 2.5.1 - Authenticated (Admin+) SQL Injection CVE-2021-24345 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H May 27, 2021
Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url CVE-2023-1124 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 13, 2023
Cookie Notification Plugin for WordPress < 1.0.9 - SQL Injection CVE-2021-24858 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 27, 2021
Wow Forms – create any form with custom style <= 3.1.3 - Authenticated (Admin+) SQL Injection CVE-2021-24628 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 7, 2021
SpiderCatalog <= 1.7.3 - Authenticated (Admin+) SQL Injection CVE-2021-24625 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Post Content XMLRPC <= 1.0 - Authenticated (Admin+) SQL Injection CVE-2021-24629 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Unlimited PopUps <= 4.5.3 - Authenticated (Admin+) SQL Injection CVE-2021-24631 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Broken Link Manager <= 0.6.5 - Authenticated (Admin+) SQL Injection CVE-2021-24550 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021
Paytm – Donation Plugin <= 1.3.2 - Authenticated (Admin+) SQL Injection CVE-2021-24554 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021
Timeline Calendar <= 1.2 - Authenticated (Admin+) SQL Injection CVE-2021-24553 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021
Simple Events Calendar <= 1.4.0 - Authenticated SQL Injection CVE-2021-24552 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation