Francesco Carlucci

20212022202320242025

Critical

High

Medium

Low

Global Rank

#10

of 3,203 researchers

Vulns

565

Critical11

High89

Medium464

Low1

Affected Assets

466

442plugins23themes1core

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

565 records


2025-05-13 00:00	Ninja Forms Webhooks <= 3.0.7 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook Ninja Forms Webhooks <= 3.0.7	`CVE-2024-13940`	5.5 Medium	Francesco Carlucci	Yes
2025-04-30 00:00	Gravity Forms WebHooks <= 1.6.0 - Authenticated (Admin+) Server-Side Request Forgery via Webhook Gravity Forms WebHooks <= 1.6.0	`CVE-2024-13845`	5.5 Medium	Francesco Carlucci	Yes
2025-04-21 00:00	Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure Memberpress <= 1.11.37	`CVE-2024-11299`	5.3 Medium	Francesco Carlucci	Yes
2025-03-25 00:00	WordPress Importer <= 0.8.3 - Authenticated (Administrator+) PHP Object Injection WordPress Importer <= 0.8.3	`CVE-2024-13889`	7.2 High	Francesco Carlucci	Yes
2025-03-21 18:21	Make Builder <= 1.1.10 - Authenticated (Subscriber+) Server-Side Request Forgery via make_builder_ajax_subscribe Function Your Friendly Drag and Drop Page Builder <= 1.1.10	`CVE-2024-13856`	6.4 Medium	Francesco Carlucci	Yes
2025-03-11 00:00	Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook Uncanny Automator <= 6.2	`CVE-2024-13838`	5.5 Medium	Francesco Carlucci	Yes
2025-03-07 14:16	Allow PHP Execute <= 1.0 - Authenticated (Editor+) PHP Code Injection Allow PHP Execute <= 1.0	`CVE-2024-13890`	7.2 High	Francesco Carlucci	No
2025-03-07 14:16	Post Meta Data Manager <= 1.4.4 - Authentciated (Admin+) Multisite Privilege Escalation Post Meta Data Manager <= 1.4.4	`CVE-2024-13835`	7.2 High	Francesco Carlucci	No
2025-03-07 14:14	Code Snippets CPT <= 2.1.0 - Authenticated (Subscriber+) Arbitrary Shortcode Execution Code Snippets CPT <= 2.1.0	`CVE-2024-13895`	4.3 Medium	Francesco Carlucci	No
2025-03-06 20:56	WPGet API <= 2.2.10 - Authenticated (Administrator+) Server-Side Request Forgery WPGet API <= 2.2.10	`CVE-2024-13857`	5.5 Medium	Francesco Carlucci	Yes

Showing 1–10 of 565 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C