Alex Sanford

2023

Critical

High

Medium

Low

Global Rank

#205

of 3,238 researchers

Vulns

25

Critical2

High9

Medium14

Low0

Affected Assets

23

23plugins

Avg CVSS

6.8

Average score of vulnerabilities

Researcher Submissions

25 records


2023-12-21 00:00	POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.6 - Authenticated (Administrator+) SQL Injection Post SMTP <= 2.8.6	`CVE-2023-6620`	7.2 High	Alex Sanford	Yes
2023-11-30 00:00	Quiz Maker <= 6.4.9.4 - Reflected Cross-Site Scripting Quiz Maker by AYS <= 6.4.9.4	`CVE-2023-6166`	6.1 Medium	Alex Sanford	Yes
2023-11-29 00:00	rtMedia for WordPress, BuddyPress and bbPress WordPress <= 4.6.15 - Authenticated (Admin+) Arbitrary File Upload rtMedia for WordPress <= 4.6.15	`CVE-2023-5939`	7.2 High	Alex Sanford	Yes
2023-11-24 00:00	Export any WordPress data to XML/CSV < 1.4.1 & WP ALL Export Pro < 1.8.6 - Cross-Site Request Forgery to PHAR Deserialization WP All Export Pro < 1.8.6	`CVE-2023-5886`	8.8 High	Alex Sanford	Yes
2023-11-13 00:00	WP Fastest Cache <= 1.2.1 - Unauthenticated SQL Injection WP Fastest Cache <= 1.2.1	`CVE-2023-6063`	9.8 Critical	Alex Sanford	Yes
2023-10-30 00:00	EventPrime <= 3.3.2 - Improper Server-Side Checks to Booking Payment Bypass EventPrime <= 3.3.2	`CVE-2023-4252`	5.3 Medium	Alex Sanford	Yes
2023-10-16 00:00	Awesome Support <= 6.1.4 - Authenticated (Submitter+) Arbitrary File Deletion Awesome Support <= 6.1.4	`CVE-2023-5355`	8.1 High	Alex Sanford	Yes
2023-10-16 00:00	Awesome Support <= 6.1.4 - Reflected Cross-Site Scripting Awesome Support <= 6.1.4	`CVE-2023-5354`	6.1 Medium	Alex Sanford	Yes
2023-10-09 00:00	EventPrime < 3.2.0 - Cross-Site Request Forgery EventPrime < 3.2.0	`CVE-2023-4251`	4.3 Medium	Alex Sanford	Yes
2023-09-25 00:00	WordPress Gallery Plugin – NextGEN Gallery <= 3.38 - Authenticated (Admin+) Local File Inclusion Photo Gallery <= 3.38	`CVE-2023-3279`	4.9 Medium	Alex Sanford	Yes

Showing 1–10 of 25 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C