Wordfence Intelligence   >   Vulnerability Researchers   >   yuyudhn

yuyudhn

14
All Time Ranking
157
All Time Discoveries

About

I am passionate about cybersecurity, GNU/Linux, and open source. I have been using Debian as my daily driver since 2013. I am a fan of Evangelion and My Hero Academia. And obviously, I am a big fan of the GOAT, Cristiano Ronaldo.

Showing 41-60 of 157 Vulnerabilities

Twitch Player <= 2.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
6.1
CVE-2023-25464
Feb 13, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Automatic Youtube Video Posts Plugin <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
5.5
CVE-2023-49180
Nov 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
ANAC XML Bandi di Gara <= 7.5 - Authenticated (Editor+) Stored Cross-Site Scripting
5.5
CVE-2023-47656
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Animated Number Counters <= 1.6 - Authenticated (Editor+) Stored Cross-Site Scripting
5.5
CVE-2023-24393
Jul 4, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
affiliate-toolkit – WordPress Affiliate Plugin <= 3.3.3 - Authenticated (Editor+) Stored Cross-Site Scripting
5.5
CVE-2023-23786
Mar 30, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Click to Call or Chat Buttons <= 1.4.0 - Authenticated(Admin+) Stored Cross-Site Scripting
5.5
CVE-2023-25710
Feb 15, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Archivist – Custom Archive Templates <= 1.7.4 - Authenticated(Admin+) Stored Cross-Site Scripting
5.5
CVE-2023-25490
Feb 15, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Quick Paypal Payments <= 5.7.25 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2023-25702
Feb 10, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Chained Quiz <= 1.3.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE-2023-25027
Feb 6, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Booking calendar, Appointment Booking System <= 3.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
5.5
CVE-2022-47438
Jan 27, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Auto Hide Admin Bar <= 1.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE-2023-23994
Jan 25, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
MailOptin <= 1.2.54.0 - Authenticated (Admin+) Cross Site Scripting
5.5
CVE-2023-23980
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Social Like Box and Page by WpDevArt <= 0.8.39 - Authenticated (Admin+) Stored Cross Site Scripting
5.5
CVE-2023-23972
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
VikRentCar Car Rental Management System <= 1.3.0 - Authenticated (Admin+) Cross Site Scripting
5.5
CVE-2023-23998
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
WP eBay Product Feeds <= 3.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2023-23722
Jan 19, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Page Loading Effects <= 2.0.0 - Authenticated (Admin+) Stored Cross Site Scripting
5.5
CVE-2023-23718
Jan 19, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Slider Hero <= 8.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2022-3074
Sep 5, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
LeadSquared Suite <= 0.7.4 - Cross-Site Request Forgery
5.4
CVE-2023-45047
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Social proof testimonials and reviews by Repuso <= 5.01 - Cross-Site Request Forgery
5.4
CVE-2023-45048
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
wp tell a friend popup form <= 7.1 - Cross-Site Request Forgery via 'TellAFriend_admin'
5.4
CVE-2023-25463
Jul 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Title CVE ID CVSS Vector Date
Twitch Player <= 2.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-25464 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 13, 2023
Automatic Youtube Video Posts Plugin <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings CVE-2023-49180 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N November 29, 2023
ANAC XML Bandi di Gara <= 7.5 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2023-47656 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N November 7, 2023
Animated Number Counters <= 1.6 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2023-24393 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N July 4, 2023
affiliate-toolkit – WordPress Affiliate Plugin <= 3.3.3 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2023-23786 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N March 30, 2023
Click to Call or Chat Buttons <= 1.4.0 - Authenticated(Admin+) Stored Cross-Site Scripting CVE-2023-25710 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
Archivist – Custom Archive Templates <= 1.7.4 - Authenticated(Admin+) Stored Cross-Site Scripting CVE-2023-25490 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N February 15, 2023
Quick Paypal Payments <= 5.7.25 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-25702 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N February 10, 2023
Chained Quiz <= 1.3.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-25027 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N February 6, 2023
Booking calendar, Appointment Booking System <= 3.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2022-47438 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N January 27, 2023
Auto Hide Admin Bar <= 1.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-23994 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N January 25, 2023
MailOptin <= 1.2.54.0 - Authenticated (Admin+) Cross Site Scripting CVE-2023-23980 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N January 20, 2023
Social Like Box and Page by WpDevArt <= 0.8.39 - Authenticated (Admin+) Stored Cross Site Scripting CVE-2023-23972 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N January 20, 2023
VikRentCar Car Rental Management System <= 1.3.0 - Authenticated (Admin+) Cross Site Scripting CVE-2023-23998 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N January 20, 2023
WP eBay Product Feeds <= 3.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-23722 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N January 19, 2023
Page Loading Effects <= 2.0.0 - Authenticated (Admin+) Stored Cross Site Scripting CVE-2023-23718 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N January 19, 2023
Slider Hero <= 8.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2022-3074 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N September 5, 2022
LeadSquared Suite <= 0.7.4 - Cross-Site Request Forgery CVE-2023-45047 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 3, 2023
Social proof testimonials and reviews by Repuso <= 5.01 - Cross-Site Request Forgery CVE-2023-45048 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 3, 2023
wp tell a friend popup form <= 7.1 - Cross-Site Request Forgery via 'TellAFriend_admin' CVE-2023-25463 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L July 26, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation