dc11

202120222023

Critical

High

Medium

Low

Global Rank

#121

of 3,238 researchers

Vulns

48

Critical4

High19

Medium25

Low0

Affected Assets

35

35plugins

Avg CVSS

7.2

Average score of vulnerabilities

Researcher Submissions

48 records


2023-11-28 00:00	WP Mail Log <= 1.1.2 - Incorrect Authorization to Authenticated (Contributor+) Data Viewing and Deletion WP Mail Log <= 1.1.2	`CVE-2023-5644`	6.4 Medium	dc11	Yes
2023-11-28 00:00	WP Mail Log <= 1.1.2 - Authenticated (Contributor+) Arbitrary File Read WP Mail Log <= 1.1.2	`CVE-2023-5672`	6.5 Medium	dc11	Yes
2023-11-28 00:00	WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL injection via key WP Mail Log <= 1.1.2	`CVE-2023-5645`	8.8 High	dc11	Yes
2023-11-20 00:00	WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL Injection via id WP Mail Log <= 1.1.2	`CVE-2023-5674`	7.2 High	dc11	Yes
2023-11-06 00:00	Woocommerce Vietnam Checkout <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting Vietnam Checkout for WooCommerce <= 2.0.5	`CVE-2023-5325`	7.2 High	dc11	Yes
2023-10-31 00:00	WP Meta and Date Remover < 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via settings WP Meta and Date Remover < 2.2.0	`CVE-2023-4823`	6.4 Medium	dc11	Yes
2023-09-07 00:00	Form Maker by 10Web <= 1.15.19 - Unauthenticated Arbitrary File Upload Form Maker by 10Web < 1.15.20	`CVE-2023-4666`	9.8 Critical	dc11	Yes
2023-05-22 00:00	SupportCandy <= 3.1.6 - Authenticated (Subscriber+) SQL Injection SupportCandy <= 3.1.6	`CVE-2023-2719`	8.8 High	dc11	Yes
2023-05-22 00:00	SupportCandy <= 3.1.6 - Authenticated (Admin+) SQL Injection SupportCandy <= 3.1.6	`CVE-2023-2805`	7.2 High	dc11	Yes
2023-04-10 00:00	SupportCandy <= 3.1.4 - Unauthenticated SQL Injection via parse_user_filters SupportCandy <= 3.1.4	`CVE-2023-1730`	9.8 Critical	dc11	Yes

Showing 1–10 of 48 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C