Wordfence Intelligence   >   Vulnerability Researchers   >   Vladislav Pokrovsky (ΞX.MI)

Vladislav Pokrovsky (ΞX.MI)

Organization: Independent AppSec Researcher

7
All Time Ranking
260
All Time Discoveries

About

AppSec // Bug Bounty // Legal Hacking

«When you lose fun and start doing things only for the payback, you're dead.» © Phrack #65

Showing 81-100 of 260 Vulnerabilities

Adifier (Premium Theme) < 3.1.4 - Reflected Cross-Site Scripting
6.1
CVE-2023-49187
Nov 29, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Form Maker by 10Web <= 1.15.18 - Reflected Cross-Site Scripting
6.1
CVE-2023-45070
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Social Media & Share Icons <= 2.8.3 - Reflected Cross-Site Scripting
6.1
CVE-2023-41238
Aug 29, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Multiple DeoThemes Themes <= (Various Versions) - Reflected Cross-Site Scripting
6.1
CVE-2023-3708
Jul 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Balkon <= 1.3.2 - Reflected Cross-Site Scripting
6.1
CVE-2023-36502
Jun 23, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
TheRoof <= 1.0.3 - Reflected Cross-Site Scripting
6.1
CVE-2023-29430
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Outdoor <= 3.9.6 - Reflected Cross-Site Scripting
6.1
CVE-2023-29236
Apr 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Real Estate 7 <= 3.3.4 - Reflected Cross-Site Scripting via ct_additional_features
6.1
CVE ID Unknown
Feb 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Event Calendar <= 1.4.6 - Reflected Cross-Site Scripting
6.1
CVE-2022-36390
Aug 25, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Quick Restaurant Reservations <= 1.4.1 - Reflected Cross-Site Scripting
6.1
CVE-2022-29923
May 12, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Countdown & Clock <= 2.3.2 - Reflected Cross-Site Scripting
6.1
CVE-2022-29421
Apr 28, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Advanced Contact form 7 DB <= 1.8.7 - Stored Cross-Site Scripting
6.1
CVE-2022-29408
Apr 21, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Contact Form X <= 2.4 - Reflected Cross-Site Scripting
6.1
CVE-2022-25601
Feb 25, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.6 - Reflected Cross-Site Scripting
6.1
CVE-2021-36919
Nov 26, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Contact Form 7 Database Addon – CFDB7 <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting
6.1
CVE-2021-36885
Nov 12, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Aug 30, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Reflected Cross-Site Scripting
6.1
CVE-2021-36875
Jul 27, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting
6.1
CVE-2021-24426
Jun 16, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Pro Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting
6.1
CVE-2021-24387
Jun 10, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Car Repair Services & Auto Mechanic < 4.0 - Reflected Cross-Site Scripting
6.1
CVE-2021-24335
May 17, 2021
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Adifier (Premium Theme) < 3.1.4 - Reflected Cross-Site Scripting CVE-2023-49187 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 29, 2023
Form Maker by 10Web <= 1.15.18 - Reflected Cross-Site Scripting CVE-2023-45070 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N October 3, 2023
Social Media & Share Icons <= 2.8.3 - Reflected Cross-Site Scripting CVE-2023-41238 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 29, 2023
Multiple DeoThemes Themes <= (Various Versions) - Reflected Cross-Site Scripting CVE-2023-3708 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 17, 2023
Balkon <= 1.3.2 - Reflected Cross-Site Scripting CVE-2023-36502 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 23, 2023
TheRoof <= 1.0.3 - Reflected Cross-Site Scripting CVE-2023-29430 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 6, 2023
Outdoor <= 3.9.6 - Reflected Cross-Site Scripting CVE-2023-29236 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 4, 2023
Real Estate 7 <= 3.3.4 - Reflected Cross-Site Scripting via ct_additional_features 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 28, 2023
Event Calendar <= 1.4.6 - Reflected Cross-Site Scripting CVE-2022-36390 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 25, 2022
Quick Restaurant Reservations <= 1.4.1 - Reflected Cross-Site Scripting CVE-2022-29923 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 12, 2022
Countdown & Clock <= 2.3.2 - Reflected Cross-Site Scripting CVE-2022-29421 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 28, 2022
Advanced Contact form 7 DB <= 1.8.7 - Stored Cross-Site Scripting CVE-2022-29408 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 21, 2022
Contact Form X <= 2.4 - Reflected Cross-Site Scripting CVE-2022-25601 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 25, 2022
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.6 - Reflected Cross-Site Scripting CVE-2021-36919 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 26, 2021
Contact Form 7 Database Addon – CFDB7 <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting CVE-2021-36885 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N November 12, 2021
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 30, 2021
Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Reflected Cross-Site Scripting CVE-2021-36875 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N July 27, 2021
Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting CVE-2021-24426 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 16, 2021
WP Pro Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting CVE-2021-24387 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 10, 2021
Car Repair Services & Auto Mechanic < 4.0 - Reflected Cross-Site Scripting CVE-2021-24335 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 17, 2021

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation