Wordfence Intelligence   >   Vulnerability Researchers   >   thiennv

thiennv

21
All Time Ranking
121
All Time Discoveries

Showing 1-20 of 121 Vulnerabilities

GEO my WordPress <= 4.1 - Cross-Site Request Forgery
4.3
CVE-2024-32097
Apr 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Table & Contact Form 7 Database – Tablesome <= 1.0.25 - Cross-Site Request Forgery
4.3
CVE-2024-31388
Apr 10, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
ProfileGrid <= 5.7.8 - Cross-Site Request Forgery
4.3
CVE-2024-31362
Apr 8, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Smart Online Order for Clover <= 1.5.4 - Cross-Site Request Forgery
4.3
CVE-2024-31238
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Custom Twitter Feeds (Tweets Widget) <= 2.1.2 - Cross-Site Request Forgery
4.3
CVE-2023-52136
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Customize My Account for WooCommerce <= 1.8.3 - Cross-Site Request Forgery via restore_my_account_tabs
4.3
CVE-2023-51369
Dec 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Product Catalog Feed by PixelYourSite <= 2.1.1 - Cross-Site Request Forgery
4.3
CVE-2023-49824
Dec 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Product Enquiry for WooCommerce <= 3.0 - Cross-Site Request Forgery
4.3
CVE-2023-49761
Dec 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
RegistrationMagic <= 5.2.2.6 - Cross-Site Request Forgery
4.3
CVE-2023-47645
Nov 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.4.2 - Missing Authorization via woof_meta_get_keys()
4.3
CVE-2023-40334
Nov 23, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Awesome Support <= 6.1.4 - Missing Authorization via wpas_edit_reply_ajax()
4.3
CVE-2023-48324
Nov 23, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Awesome Support <= 6.1.4 - Cross-Site Request Forgery via wpas_edit_reply_ajax()
4.3
CVE-2023-48323
Nov 23, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Live Preview for Contact Form 7 <= 1.2.0 - Missing Authorization via update_option
4.3
CVE-2023-47830
Nov 16, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Multi Step Form <= 1.7.12 - Cross-Site Request Forgery
4.3
CVE-2023-47758
Nov 13, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WP Links Page <= 4.9.4 - Cross-Site Request Forgery via wplf_ajax_update_screenshots
4.3
CVE-2023-47651
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
ProfileGrid <= 5.6.6 - Cross-Site Request Forgery
4.3
CVE-2023-47644
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Donations Made Easy – Smart Donations <= 4.0.12 - Cross-Site Request Forgery
4.3
CVE-2023-47551
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
WooCommerce Product Table Lite <= 2.6.2 - Cross-Site Request Forgery
4.3
CVE-2023-47519
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Decorator - WooCommerce Email Customizer <= 1.2.7 - Cross-Site Request Forgery
4.3
CVE-2023-48284
Nov 2, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
DeepL Pro API translation <= 2.4.1.1 - Cross-Site Request Forgery via wpdeepl_prune_logs
4.3
CVE-2023-46620
Oct 25, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
GEO my WordPress <= 4.1 - Cross-Site Request Forgery CVE-2024-32097 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 11, 2024
Table & Contact Form 7 Database – Tablesome <= 1.0.25 - Cross-Site Request Forgery CVE-2024-31388 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 10, 2024
ProfileGrid <= 5.7.8 - Cross-Site Request Forgery CVE-2024-31362 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 8, 2024
Smart Online Order for Clover <= 1.5.4 - Cross-Site Request Forgery CVE-2024-31238 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 5, 2024
Custom Twitter Feeds (Tweets Widget) <= 2.1.2 - Cross-Site Request Forgery CVE-2023-52136 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 28, 2023
Customize My Account for WooCommerce <= 1.8.3 - Cross-Site Request Forgery via restore_my_account_tabs CVE-2023-51369 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 26, 2023
Product Catalog Feed by PixelYourSite <= 2.1.1 - Cross-Site Request Forgery CVE-2023-49824 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 5, 2023
Product Enquiry for WooCommerce <= 3.0 - Cross-Site Request Forgery CVE-2023-49761 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N December 4, 2023
RegistrationMagic <= 5.2.2.6 - Cross-Site Request Forgery CVE-2023-47645 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 27, 2023
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.4.2 - Missing Authorization via woof_meta_get_keys() CVE-2023-40334 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N November 23, 2023
Awesome Support <= 6.1.4 - Missing Authorization via wpas_edit_reply_ajax() CVE-2023-48324 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 23, 2023
Awesome Support <= 6.1.4 - Cross-Site Request Forgery via wpas_edit_reply_ajax() CVE-2023-48323 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 23, 2023
Live Preview for Contact Form 7 <= 1.2.0 - Missing Authorization via update_option CVE-2023-47830 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N November 16, 2023
Multi Step Form <= 1.7.12 - Cross-Site Request Forgery CVE-2023-47758 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 13, 2023
WP Links Page <= 4.9.4 - Cross-Site Request Forgery via wplf_ajax_update_screenshots CVE-2023-47651 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 7, 2023
ProfileGrid <= 5.6.6 - Cross-Site Request Forgery CVE-2023-47644 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 7, 2023
Donations Made Easy – Smart Donations <= 4.0.12 - Cross-Site Request Forgery CVE-2023-47551 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 7, 2023
WooCommerce Product Table Lite <= 2.6.2 - Cross-Site Request Forgery CVE-2023-47519 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 7, 2023
Decorator - WooCommerce Email Customizer <= 1.2.7 - Cross-Site Request Forgery CVE-2023-48284 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N November 2, 2023
DeepL Pro API translation <= 2.4.1.1 - Cross-Site Request Forgery via wpdeepl_prune_logs CVE-2023-46620 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N October 25, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation