Author: Tom Adams

Country:

Reported research: 34

Advisories

Risk
Topic & Details
Low
WordPress Tooltipy 5.0 Cross Site Scripting
 Remote | 2018-06-13
Low
WordPress Tooltipy 5.0 Cross Site Request Forgery
| 2018-06-13
Low
Metronet Tag Manager 1.2.7 Cross Site Request Forgery
 Remote | 2018-05-16
Low
WordPress WP User Groups 2.0.0 Cross Site Request Forgery
 Remote | 2018-05-12
Med.
WordPress Content Audit 1.9.1 Cross Site Request Forgery / Cross Site Scripting
 Remote | 2017-09-28
Low
WordPress Download Manager 2.9.46 / 2.9.51 Cross Site Scripting
 Remote | 2017-06-21
Med.
WordPress Photo Gallery 1.3.34 / 1.3.42 Path Traversal
 Remote | 2017-06-21
Low
WordPress Stop User Enumeration 1.3.4 User Enumeration
 Remote | 2017-01-05
Med.
WordPress Image Slider 1.1.41 / 1.1.89 Arbitrary File Deletion
 Remote | 2016-12-28
Low
WordPress Copy-Me 1.0.0 Cross Site Request Forgery
 Remote | 2016-12-23
Low
WordPress Quiz And Survey Master 4.7.8 / 4.5.4 XSS / CSRF
 Remote | 2016-12-17
Low
WordPress MailChimp 3.1.5 / 4.0.10 Cross Site Scripting
 Remote | 2016-12-15
Low
WordPress Multisite Post Duplicator 0.9.5.1 Cross Site Request Forgery
 Remote | 2016-12-12
Med.
WordPress Private Only 3.5.1 CSRF / Cross Site Scripting (CVE assigned)
 Remote | 2015-08-28
Low
WordPress OAuth2 Complete 3.1.3 Insecure Random
 Remote | 2015-08-13
Med.
WordPress 3.8.1 / 3.8.2 / 4.2.2 Cross Site Request Forgery
 Remote | 2015-08-09
Low
WordPress Flickr Justified Gallery 3.3.6 Cross Site Scripting
 Remote | 2015-07-29
Med.
WordPress BuddyPress Activity Plus 1.5 CSRF / File Deletion
 Remote | 2015-07-17
High
WordPress Subscribe To Comments 2.1.2 LFI / Code Execution
 Remote | 2015-07-17
Low
The Events Calender: Eventbrite Tickets 3.9.6 Cross Site Scripting (CVE assigned)
 Remote | 2015-07-15
Low
WordPress Plotly 1.0.2 Cross Site Scripting (CVE assigned)
 Remote | 2015-07-15
Low
WordPress GD bbPress Attachments 2.1 Cross Site Scripting
 Remote | 2015-07-13
Med.
WordPress GD bbPress Attachments 2.1 Local File Inclusion (CVE assigned)
 Remote | 2015-07-13
Med.
WordPress Content Slide 1.4.2 CSRF / Cross Site Scripting
 Remote | 2015-04-20
Med.
WordPress Content Audit 1.6 Blind SQL Injection (CVE assigned)
 Remote | 2014-10-02
Low
WordPress WP-Ban 1.62 Bypass (CVE assigned)
 Remote | 2014-09-18
Med.
WordPress Login Widget With Shortcode 3.1.1 CSRF / XSS
 Remote | 2014-09-18
High
WordPress Advanced Access Manager 2.8.2 File Write / Code Execution (CVE assigned)
 Remote | 2014-09-04
Low
WordPress Mobile Pack 2.0.1 Information Disclosure
 Remote | 2014-08-21
Low
Member Approval 131109 permits unapproved registrations CSRF
 Remote | 2014-06-11

Do you know.. we can display your:

- Twitter Link
- Website Link
- Zone-H Link
- Description of profile
- email (let us know if you want show public)

Let's us know! submit@cxsec.org

Copyright 2024, cxsecurity.com

 

Back to Top