Wordfence Intelligence   >   Vulnerability Researchers   >   Shreya Pohekar

Shreya Pohekar

55
All Time Ranking
49
All Time Discoveries

Showing 1-20 of 49 Vulnerabilities

Edit Comments <= 0.3 - Unauthenticated SQL Injection
9.8
CVE-2021-24551
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection
9.8
CVE-2021-24285
Apr 26, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Chameleon CSS <= 1.2 - Cross-Site Request Forgery
8.8
CVE-2021-24626
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Schreikasten <= 0.14.18 - Authenticated (Author+) SQL Injection
8.8
CVE-2021-24630
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Diary & Availability Calendar <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2021-24555
Jul 23, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Handsome Testimonials & Reviews < 2.1.1 - Authenticated SQL Injection
8.8
CVE-2021-24492
Jun 29, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url
7.2
CVE-2023-1124
Mar 13, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Cookie Notification Plugin for WordPress < 1.0.9 - SQL Injection
7.2
CVE-2021-24858
Dec 27, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Wow Forms – create any form with custom style <= 3.1.3 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24628
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
SpiderCatalog <= 1.7.3 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24625
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Unlimited PopUps <= 4.5.3 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24631
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Post Content XMLRPC <= 1.0 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24629
Oct 7, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Timeline Calendar <= 1.2 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24553
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Paytm – Donation Plugin <= 1.3.2 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24554
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Broken Link Manager <= 0.6.5 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24550
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Simple Events Calendar <= 1.4.0 - Authenticated SQL Injection
7.2
CVE-2021-24552
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
M-vSlider <= 2.1.3 - Authenticated (Admin+) SQL Injection
7.2
CVE-2021-24557
Jul 24, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Side Menu – add fixed side buttons <= 3.1.3 - SQL Injection
7.2
CVE-2021-24348
May 27, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
FlightLog <= 3.0.2 - Authenticated (Editor+) SQL Injection
7.2
CVE-2021-24336
May 19, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Amr Ical Events Lists <= 6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
6.6
CVE-2023-1021
Apr 4, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N
Title CVE ID CVSS Vector Date
Edit Comments <= 0.3 - Unauthenticated SQL Injection CVE-2021-24551 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 24, 2021
Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection CVE-2021-24285 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 26, 2021
Chameleon CSS <= 1.2 - Cross-Site Request Forgery CVE-2021-24626 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Schreikasten <= 0.14.18 - Authenticated (Author+) SQL Injection CVE-2021-24630 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Diary & Availability Calendar <= 1.0.3 - Authenticated (Subscriber+) SQL Injection CVE-2021-24555 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H July 23, 2021
Handsome Testimonials & Reviews < 2.1.1 - Authenticated SQL Injection CVE-2021-24492 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H June 29, 2021
Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url CVE-2023-1124 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 13, 2023
Cookie Notification Plugin for WordPress < 1.0.9 - SQL Injection CVE-2021-24858 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 27, 2021
Wow Forms – create any form with custom style <= 3.1.3 - Authenticated (Admin+) SQL Injection CVE-2021-24628 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 7, 2021
SpiderCatalog <= 1.7.3 - Authenticated (Admin+) SQL Injection CVE-2021-24625 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Unlimited PopUps <= 4.5.3 - Authenticated (Admin+) SQL Injection CVE-2021-24631 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Post Content XMLRPC <= 1.0 - Authenticated (Admin+) SQL Injection CVE-2021-24629 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 7, 2021
Timeline Calendar <= 1.2 - Authenticated (Admin+) SQL Injection CVE-2021-24553 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021
Paytm – Donation Plugin <= 1.3.2 - Authenticated (Admin+) SQL Injection CVE-2021-24554 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021
Broken Link Manager <= 0.6.5 - Authenticated (Admin+) SQL Injection CVE-2021-24550 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021
Simple Events Calendar <= 1.4.0 - Authenticated SQL Injection CVE-2021-24552 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021
M-vSlider <= 2.1.3 - Authenticated (Admin+) SQL Injection CVE-2021-24557 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 24, 2021
Side Menu – add fixed side buttons <= 3.1.3 - SQL Injection CVE-2021-24348 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 27, 2021
FlightLog <= 3.0.2 - Authenticated (Editor+) SQL Injection CVE-2021-24336 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 19, 2021
Amr Ical Events Lists <= 6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-1021 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N April 4, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation