← All credits
Dave Jong (Patchstack)
227 vulnerability records and advisories credit this contributor.
CVE-2023-25970
WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload
CVE-2023-25960
WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to SQL Injection
CVE-2023-25715
WordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access Control
CVE-2023-25701
WordPress WatchTowerHQ plugin <= 3.6.16 - Privilege Escalation
CVE-2023-25697
WordPress GamiPress plugin <= 2.5.6 - CSRF Leading to Settings Change Vulnerability
CVE-2023-25446
WordPress HappyFiles Pro plugin <= 1.8.1 - Broken Access Control vulnerability
CVE-2023-25447
WordPress ColorWay Theme <= 4.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-25445
WordPress HappyFiles Pro plugin <= 1.8.1 - Broken Access Control vulnerability
CVE-2023-25068
WordPress Magazine Edge theme <= 1.13 - Authenticated Arbitrary Plugin Activation
CVE-2023-24009
WordPress Upfrontwp Theme <= 1.1 is vulnerable to Cross Site Scripting (XSS)