Bassem Essam

20242025

Critical

High

Medium

Low

Global Rank

#303

of 3,238 researchers

Vulns

15

Critical0

High5

Medium10

Low0

Affected Assets

14

14plugins

Avg CVSS

7.0

Average score of vulnerabilities

Researcher Submissions

15 records


2025-04-04 13:09	Read More & Accordion <= 3.4.7 - Cross-Site Request Forgery to Local File Inclusion Read More & Accordion <= 3.4.7	`CVE-2025-0810`	7.5 High	Bassem Essam	Yes
2025-03-13 00:00	InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File Inclusion InstaWP Connect <= 0.1.0.83	`CVE-2024-13913`	8.8 High	Bassem Essam	Yes
2025-02-19 19:43	Modal Window <= 6.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframeBox Shortcode Modal Window <= 6.1.5	`CVE-2025-0897`	6.4 Medium	Bassem Essam	Yes
2025-02-18 19:35	WordPress Portfolio Builder – Portfolio Gallery <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode WordPress Portfolio Builder <= 1.1.7	`CVE-2025-1757`	6.4 Medium	Bassem Essam	No
2025-01-31 00:00	Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Better Messages <= 2.6.9	`CVE-2024-13612`	6.4 Medium	Bassem Essam	Yes
2024-07-03 23:23	Nested Pages <= 3.2.7 - Cross-Site Request Forgery to Local File Inclusion Nested Pages <= 3.2.7	`CVE-2024-5943`	8.8 High	Bassem Essam	Yes
2024-06-28 00:00	Page and Post Clone <= 6.0 - Insecure Direct Object Reference to Authenticated (Author+) Sensitive Information Exposure Fast Page & Post Duplicator <= 6.0	`CVE-2024-5942`	4.3 Medium	Bassem Essam	Yes
2024-05-06 00:00	Yoast SEO <= 22.5 - Reflected Cross-Site Scripting Yoast SEO <= 22.5	`CVE-2024-4041`	6.1 Medium	Bassem Essam	Yes
2024-04-26 00:00	WP ULike – Most Advanced WordPress Marketing Toolkit <= 4.6.9 - Authenticated (Contributor+) SQL Injection via Shortcodes WP ULike <= 4.6.9	`CVE-2024-1797`	8.8 High	Bassem Essam	Yes
2024-03-19 00:00	GiveWP – Donation Plugin and Fundraising Platform <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting GiveWP <= 3.5.1	`CVE-2024-1424`	6.4 Medium	Bassem Essam	Yes

Showing 1–10 of 15 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C