Wordfence Intelligence   >   Vulnerability Researchers   >   Skalucy

Skalucy

49
All Time Ranking
62
All Time Discoveries

Showing 1-20 of 62 Vulnerabilities

Ovic Responsive WPBakery <= 1.3.0 - Missing Authorization
4.3
CVE-2024-32142
Apr 16, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Marker.io <= 1.1.8 - Cross-Site Request Forgery
4.3
CVE-2024-31427
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WooCommerce Checkout Field Editor (Checkout Manager) <= 2.1.8 - Cross-Site Request Forgery
4.3
CVE-2024-31262
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Loan Repayment Calculator and Application Form <= 2.9.4 - Cross-Site Request Forgery
4.3
CVE-2024-31263
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Popup Cart Lite for WooCommerce <= 1.1 - Cross-Site Request Forgery
4.3
CVE-2024-31100
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Landingi Landing Pages <= 3.1.1 - Cross-Site Request Forgery
4.3
CVE-2024-30521
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Custom WooCommerce Checkout Fields Editor <= 1.3.0 - Cross-Site Request Forgery
4.3
CVE-2024-30518
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Custom Order Statuses for WooCommerce <= 1.5.2 - Cross-Site Request Forgery
5.4
CVE-2024-25930
Feb 20, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
WP Contact Form <= 1.6 - Cross-Site Request Forgery via wpcf_adminpage
4.3
CVE-2024-24929
Feb 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Post Video Players <= 1.159 - Cross-Site Request Forgery via cincopa_mp_mt_options_page
4.3
CVE-2024-23515
Jan 30, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
FreshMail For WordPress <= 2.3.2 - Cross-Site Request Forgery
4.3
CVE-2024-22304
Jan 17, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Floating Button <= 6.0 - Cross-Site Request Forgery via process_bulk_action
4.3
CVE-2023-52149
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Republish Old Posts <= 1.21 - Cross-Site Request Forgery via rop_options_page
4.3
CVE-2023-52145
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Product Table by WBW <= 1.8.6 - Cross-Site Request Forgery via saveGroup
4.3
CVE-2023-51512
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Export Media URLs <= 1.0 - Cross-Site Request Forgery
4.3
CVE-2023-51510
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Webba Booking <= 4.5.33 - Cross-Site Request Forgery
4.3
CVE-2023-51354
Dec 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Advanced Category Template <= 0.1 - Cross-Site Request Forgery
4.3
CVE-2023-50835
Dec 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter <= 1.49.3 - Cross-Site Request Forgery
4.3
CVE-2023-49855
Dec 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Redirects <= 1.2.1 - Missing Authorization
5.3
CVE-2023-49845
Dec 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WooDiscuz – WooCommerce Comments <= 2.3.0 - Cross-Site Request Forgery
4.3
CVE-2023-49759
Dec 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Ovic Responsive WPBakery <= 1.3.0 - Missing Authorization CVE-2024-32142 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 16, 2024
Marker.io <= 1.1.8 - Cross-Site Request Forgery CVE-2024-31427 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 10, 2024
WooCommerce Checkout Field Editor (Checkout Manager) <= 2.1.8 - Cross-Site Request Forgery CVE-2024-31262 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 5, 2024
Loan Repayment Calculator and Application Form <= 2.9.4 - Cross-Site Request Forgery CVE-2024-31263 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 5, 2024
Popup Cart Lite for WooCommerce <= 1.1 - Cross-Site Request Forgery CVE-2024-31100 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 29, 2024
Landingi Landing Pages <= 3.1.1 - Cross-Site Request Forgery CVE-2024-30521 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 28, 2024
Custom WooCommerce Checkout Fields Editor <= 1.3.0 - Cross-Site Request Forgery CVE-2024-30518 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N March 28, 2024
Custom Order Statuses for WooCommerce <= 1.5.2 - Cross-Site Request Forgery CVE-2024-25930 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L February 20, 2024
WP Contact Form <= 1.6 - Cross-Site Request Forgery via wpcf_adminpage CVE-2024-24929 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N February 9, 2024
Post Video Players <= 1.159 - Cross-Site Request Forgery via cincopa_mp_mt_options_page CVE-2024-23515 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 30, 2024
FreshMail For WordPress <= 2.3.2 - Cross-Site Request Forgery CVE-2024-22304 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 17, 2024
Floating Button <= 6.0 - Cross-Site Request Forgery via process_bulk_action CVE-2023-52149 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 28, 2023
Republish Old Posts <= 1.21 - Cross-Site Request Forgery via rop_options_page CVE-2023-52145 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 28, 2023
Product Table by WBW <= 1.8.6 - Cross-Site Request Forgery via saveGroup CVE-2023-51512 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 27, 2023
Export Media URLs <= 1.0 - Cross-Site Request Forgery CVE-2023-51510 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 27, 2023
Webba Booking <= 4.5.33 - Cross-Site Request Forgery CVE-2023-51354 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 26, 2023
Advanced Category Template <= 0.1 - Cross-Site Request Forgery CVE-2023-50835 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 19, 2023
BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter <= 1.49.3 - Cross-Site Request Forgery CVE-2023-49855 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 7, 2023
Redirects <= 1.2.1 - Missing Authorization CVE-2023-49845 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 6, 2023
WooDiscuz – WooCommerce Comments <= 2.3.0 - Cross-Site Request Forgery CVE-2023-49759 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 4, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation