Sushmita Poudel

286
All Time Ranking
8
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

8 Vulnerabilities

Title CVE ID CVSS Vector Date
Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.1 - Unauthenticated Email Template Disclosure CVE-2024-7786 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N August 14, 2024
Himer - Social Questions and Answers <= 2.1.2 - Cross-Site Request Forgery to Arbitrary User Invites CVE-2024-2232 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N July 15, 2024
Himer <= 2.1.0 - Cross-Site Request Forgery to Private Group Join CVE-2024-2040 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 12, 2024
Himer <= 2.1.0 - Cross-Site Request Forgery to Poll Voting CVE-2024-2235 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 12, 2024
Himer <= 2.1.0 - Cross-Site Request Forgery to Group Leave CVE-2024-2233 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 12, 2024
Himer - Social Questions and Answers <= 2.1.0 - Authenticated (Subscriber+) Insecure Direct Object Reference CVE-2024-2231 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N June 12, 2024
CM Download Manager < 2.9.0 - Cross-Site Request Forgery via delHeader CVE-2024-1232 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L March 25, 2024
CM Download Manager < 2.9.0 - Cross-Site Request Forgery via unpublishHeader CVE-2024-1231 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L March 25, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation