Wordfence Intelligence   >   Vulnerability Researchers   >   yuyudhn

yuyudhn

14
All Time Ranking
157
All Time Discoveries

About

I am passionate about cybersecurity, GNU/Linux, and open source. I have been using Debian as my daily driver since 2013. I am a fan of Evangelion and My Hero Academia. And obviously, I am a big fan of the GOAT, Cristiano Ronaldo.

Showing 41-60 of 157 Vulnerabilities

WP Matterport Shortcode <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2023-35094
Jun 15, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Yandex Metrica Counter <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-34173
May 31, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
WordPress Social Login <= 3.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-34172
May 31, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
TS Webfonts for さくらのレンタルサーバ <= 3.1.1 - Cross-Site Request Forgery
4.3
CVE-2023-34169
May 31, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Unite Gallery Lite <= 1.7.61 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-34183
May 30, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Worthy – VG WORT Integration für WordPress <= 1.6.5-6497609 - Cross-Site Request Forgery
5.4
CVE-2023-24417
May 30, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Telegram Bot & Channel <= 3.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-34006
May 29, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
EventPrime <= 2.8.6 - Sensitive Information Exposure
5.3
CVE-2023-33321
May 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Unite Gallery Lite <= 1.7.59 - Authenticated(Administrator+) Local File Inclusion via 'view' parameter
5.0
CVE-2023-33310
May 22, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N
EventPrime <= 2.8.6 - Reflected Cross-Site Scripting
6.1
CVE-2023-33326
May 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Video Gallery <= 1.0.10 - Reflected Cross-Site Scripting
6.1
CVE-2023-2708
May 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
video carousel slider with lightbox <= 1.0.22 - Reflected Cross-Site Scripting
6.1
CVE-2023-2710
May 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
iframe popup <= 3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
4.4
CVE-2023-24394
May 12, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Button <= 1.1.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-23871
May 12, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting
6.1
CVE-2023-24413
May 9, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting
6.1
CVE-2023-24409
May 9, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Multi Rating <= 5.0.6 - Cross-Site Request Forgery to Arbitrary Ratings Value Change
4.3
CVE-2023-32125
May 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Multi Rating <= 5.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
4.4
CVE-2023-32130
May 4, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Multi Rating <= 5.0.6 - Missing Authorization to Arbitrary Ratings Value Change
5.3
CVE-2023-32127
May 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Hostel <= 1.1.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Manage Bookings
4.4
CVE-2023-32120
May 4, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
WP Matterport Shortcode <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-35094 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N June 15, 2023
Yandex Metrica Counter <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-34173 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 31, 2023
WordPress Social Login <= 3.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-34172 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 31, 2023
TS Webfonts for さくらのレンタルサーバ <= 3.1.1 - Cross-Site Request Forgery CVE-2023-34169 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N May 31, 2023
Unite Gallery Lite <= 1.7.61 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-34183 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 30, 2023
Worthy – VG WORT Integration für WordPress <= 1.6.5-6497609 - Cross-Site Request Forgery CVE-2023-24417 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N May 30, 2023
Telegram Bot & Channel <= 3.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-34006 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 29, 2023
EventPrime <= 2.8.6 - Sensitive Information Exposure CVE-2023-33321 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N May 22, 2023
Unite Gallery Lite <= 1.7.59 - Authenticated(Administrator+) Local File Inclusion via 'view' parameter CVE-2023-33310 5.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N May 22, 2023
EventPrime <= 2.8.6 - Reflected Cross-Site Scripting CVE-2023-33326 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 22, 2023
Video Gallery <= 1.0.10 - Reflected Cross-Site Scripting CVE-2023-2708 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 15, 2023
video carousel slider with lightbox <= 1.0.22 - Reflected Cross-Site Scripting CVE-2023-2710 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 15, 2023
iframe popup <= 3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings CVE-2023-24394 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 12, 2023
Button <= 1.1.22 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-23871 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 12, 2023
wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting CVE-2023-24413 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 9, 2023
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting CVE-2023-24409 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 9, 2023
Multi Rating <= 5.0.6 - Cross-Site Request Forgery to Arbitrary Ratings Value Change CVE-2023-32125 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N May 4, 2023
Multi Rating <= 5.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings CVE-2023-32130 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 4, 2023
Multi Rating <= 5.0.6 - Missing Authorization to Arbitrary Ratings Value Change CVE-2023-32127 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N May 4, 2023
Hostel <= 1.1.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Manage Bookings CVE-2023-32120 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N May 4, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation