cydave

20222023

Critical

High

Medium

Low

Global Rank

#75

of 3,238 researchers

Vulns

89

Critical46

High14

Medium29

Low0

Affected Assets

87

87plugins

Avg CVSS

8.3

Average score of vulnerabilities

Researcher Submissions

89 records


2023-04-17 00:00	Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection Bitcoin / AltCoin Payment Gateway for W… <= 1.7.2	`CVE-2022-4118`	9.8 Critical	cydave	Yes
2023-02-13 00:00	WooCommerce Checkout Field Manager <= 17.3 - Unauthenticated Arbitrary File Upload WooCommerce Checkout Field Manager <= 17.3	`CVE-2022-4328`	9.8 Critical	cydave	Yes
2023-01-20 00:00	FL3R FeelBox <= 8.1 - Unauthenticated SQL Injection FL3R FeelBox <= 8..1	`CVE-2022-4445`	9.8 Critical	cydave	No
2023-01-16 00:00	PDF Generator for Wordpress <= 1.1.1 - Reflected Cross-Site Scripting PDF Generator for WordPress <= 1.1.1	`CVE-2022-4321`	6.1 Medium	cydave	Yes
2023-01-04 00:00	Membership For WooCommerce <= 2.1.6 - Unauthenticated Arbitrary File Upload Membership For WooCommerce <= 2.1.6	`CVE-2022-4395`	9.8 Critical	cydave	Yes
2022-12-27 00:00	Login as User or Customer <= 3.2 - Privilege Escalation Login as User or Customer <= 3.2	`CVE-2022-4305`	9.8 Critical	cydave	Yes
2022-12-27 00:00	Pardakht Delkhah <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting پلاگین پرداخت دلخواه <= 2.9.2	`CVE-2022-4307`	7.2 High	cydave	Yes
2022-12-27 00:00	CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQL Injection CBX Petition <= 1.0.3	`CVE-2022-4383`	9.8 Critical	cydave	Yes
2022-12-26 00:00	User Post Gallery - UPG <= 2.19 - Missing Authorization to Remote Command Execution User Post Gallery 2.19	`CVE-2022-4060`	9.8 Critical	cydave	No
2022-12-23 00:00	Show All Comments <= 7.0.0 - Reflected Cross-Site Scripting Show All Comments <= 7.0.0	`CVE-2022-4295`	6.1 Medium	cydave	Yes

Showing 1–10 of 89 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C