Wordfence Intelligence   >   Vulnerability Researchers   >   stealthcopter

stealthcopter

12
All Time Ranking
222
All Time Discoveries

8 Achievements

Learn more about Achievements
Submitted 100 Vulnerabilities
Submitted 100 Vulnerabilities
June 5, 2024
Submitted 75 Vulnerabilities
Submitted 75 Vulnerabilities
May 21, 2024
Submitted 50 Vulnerabilities
Submitted 50 Vulnerabilities
May 9, 2024
Submitted 25 Vulnerabilities
Submitted 25 Vulnerabilities
April 19, 2024
1337 Vulnerability Researcher
1337 Vulnerability Researcher
April 18, 2024
Submitted 10 Vulnerabilities
Submitted 10 Vulnerabilities
March 8, 2024
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
February 20, 2024
Submitted 1 Vulnerability
Submitted 1 Vulnerability
January 22, 2024
Learn more Learn more about Achievements

Showing 1-20 of 222 Vulnerabilities

Aramex Shipping WooCommerce <= 1.1.21 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6566
Jul 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
One Click Close Comments <= 2.7.1 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6546
Jul 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Admin Post Navigation <= 2.1 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6549
Jul 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Admin Trim Interface <= 3.5.1 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6545
Jul 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Intelligence <= 1.4.0 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6573
Jul 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Add Admin JavaScript <= 2.0 - Unauthenticated Full Path Dislcosure
5.3
CVE-2024-6548
Jul 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Add Admin CSS <= 2.0.1 - Unauthenticated Full Path Dislcosure
5.3
CVE-2024-6547
Jul 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Campaign Monitor for WordPress <= 2.8.15 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6569
Jul 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion
8.8
CVE-2024-6589
Jul 24, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Optimize Images ALT Text (alt tag) & names for SEO using AI <= 3.1.1 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6571
Jul 23, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
WP Meteor Website Speed Optimization Addon <= 3.4.3 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6553
Jul 23, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Addonify – Quick View For WooCommerce <= 1.2.16 - Unauthenticated Full Path Dislcosure
5.3
CVE-2024-6560
Jul 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CoziPress <= 1.0.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-38786
Jul 19, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CTX Feed <= 6.5.6 - Authenticated (Shop Manager+) Arbitrary Options Update
7.2
CVE-2024-38775
Jul 19, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function
5.3
CVE-2024-6455
Jul 18, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload
8.8
CVE-2024-3242
Jul 17, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AForms <= 2.2.6 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6565
Jul 15, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
SchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6557
Jul 15, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6559
Jul 15, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Glossary <= 2.2.26 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6570
Jul 15, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Title CVE ID CVSS Vector Date
Aramex Shipping WooCommerce <= 1.1.21 - Unauthenticated Full Path Disclosure CVE-2024-6566 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 26, 2024
One Click Close Comments <= 2.7.1 - Unauthenticated Full Path Disclosure CVE-2024-6546 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 26, 2024
Admin Post Navigation <= 2.1 - Unauthenticated Full Path Disclosure CVE-2024-6549 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 26, 2024
Admin Trim Interface <= 3.5.1 - Unauthenticated Full Path Disclosure CVE-2024-6545 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 26, 2024
Intelligence <= 1.4.0 - Unauthenticated Full Path Disclosure CVE-2024-6573 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 26, 2024
Add Admin JavaScript <= 2.0 - Unauthenticated Full Path Dislcosure CVE-2024-6548 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 26, 2024
Add Admin CSS <= 2.0.1 - Unauthenticated Full Path Dislcosure CVE-2024-6547 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 26, 2024
Campaign Monitor for WordPress <= 2.8.15 - Unauthenticated Full Path Disclosure CVE-2024-6569 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 26, 2024
LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion CVE-2024-6589 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H July 24, 2024
Optimize Images ALT Text (alt tag) & names for SEO using AI <= 3.1.1 - Unauthenticated Full Path Disclosure CVE-2024-6571 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 23, 2024
WP Meteor Website Speed Optimization Addon <= 3.4.3 - Unauthenticated Full Path Disclosure CVE-2024-6553 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 23, 2024
Addonify – Quick View For WooCommerce <= 1.2.16 - Unauthenticated Full Path Dislcosure CVE-2024-6560 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 19, 2024
CoziPress <= 1.0.30 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-38786 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N July 19, 2024
CTX Feed <= 6.5.6 - Authenticated (Shop Manager+) Arbitrary Options Update CVE-2024-38775 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H July 19, 2024
ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function CVE-2024-6455 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 18, 2024
Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload CVE-2024-3242 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H July 17, 2024
AForms <= 2.2.6 - Unauthenticated Full Path Disclosure CVE-2024-6565 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 15, 2024
SchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosure CVE-2024-6557 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 15, 2024
XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure CVE-2024-6559 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 15, 2024
Glossary <= 2.2.26 - Unauthenticated Full Path Disclosure CVE-2024-6570 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 15, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation