Felipe Caon

Felipe Caon is a security researcher credited with 17 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #294 of 3,515 contributors. The disclosure was published in 2024.

Their research concentrates on Cross-Site Scripting, which accounts for 8 of their findings (47%). Other recurring categories include Cross-Site Request Forgery (CSRF), Authorization Bypass Through User-Controlled Key. The average CVSS score across these disclosures is 4.9, peaking at 6.4.

The most affected software includes CM Table Of Contents (2), Simple Photoswipe (2), CM E-Mail Blacklist (1), across 15 distinct plugins, themes and core versions in total.

14 of the 17 disclosed issues have a vendor fix, while 3 remain unpatched.

2024

Critical

High

Medium

Low

Global Rank

#294

of 3,515 researchers

Vulns

Critical0

High0

Medium17

Low0

Affected Assets

15plugins

Avg CVSS

4.9

Average score of vulnerabilities

Researcher Submissions

17 records


2024-11-25 00:00	The Events Calendar <= 6.8.2 - Missing Authorization to Unauthenticated Password Protected Event Disclosure The Events Calendar <= 6.8.2	`CVE-2024-5333`	5.3 Medium	Felipe Caon	Yes
2024-10-31 00:00	CM Table Of Contents <= 1.2.3 - Cross-Site Request Forgery CM Table Of Contents <= 1.2.3	`CVE-2024-5029`	4.3 Medium	Felipe Caon	Yes
2024-10-29 00:00	EventPrime – Events Calendar, Bookings and Tickets <= 3.5.0 - Insecure Direct Object Reference to (Subscriber+) Arbitrary Booking Update EventPrime <= 3.4.9	`CVE-2024-4665`	4.3 Medium	Felipe Caon	Yes
2024-10-28 00:00	CM Table Of Contents <= 1.2.2 - Cross-Site Request Forgery CM Table Of Contents <= 1.2.2	`CVE-2024-5030`	4.3 Medium	Felipe Caon	Yes
2024-09-17 00:00	WP Hardening – Fix Your WordPress Security <= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumeration WP Hardening (discontinued) <= 1.2.6	`CVE-2024-6641`	5.3 Medium	Felipe Caon	Yes
2024-07-22 00:00	CM WordPress Search And Replace Plugin <= 1.3.8 - Cross-Site Request Forgery to Plugin Setting Reset CM Search And Replace <= 1.3.8	`CVE-2024-5028`	4.3 Medium	Felipe Caon	Yes
2024-07-18 00:00	Search & Filter Pro <= 2.5.17 - Authenticated (Admin+) Stored Cross-Site Scripting Search & Filter Pro <= 2.5.17	`CVE-2024-6481`	4.4 Medium	Felipe Caon	Yes
2024-07-01 00:00	CM Popup Plugin for WordPress – Popup Maker <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CM Pop-Up <= 1.6.5	`CVE-2024-5004`	6.4 Medium	Felipe Caon	Yes
2024-06-22 00:00	CM Email Registration Blacklist and Whitelist <= 1.4.8 - Cross-Site Request Forgery CM E-Mail Blacklist <= 1.4.8	`CVE-2024-5167`	4.3 Medium	Felipe Caon	Yes
2024-06-22 00:00	WP QuickLaTeX <= 3.8.6 - Authenticated (Admin+) Stored Cross-Site Scripting WP QuickLaTeX <= 3.8.6	`CVE-2024-5472`	4.4 Medium	Felipe Caon	Yes

Showing 1–10 of 17 reports