James Golovich

2014201520162017201820192020202120222023

Critical

High

Medium

Low

Global Rank

#114

of 3,248 researchers

Vulns

50

Critical14

High18

Medium18

Low0

Affected Assets

50

41plugins8themes1core

Avg CVSS

7.7

Average score of vulnerabilities

Researcher Submissions

50 records


2023-10-12 00:00	WordPress Core < 6.3.2 – Authenticated (Subscriber+) Arbitrary Shortcode Execution via parse-media-shortcode WordPress 6.3 4.1.38 – 6.3.1 · 23 branches	`N/A`	5.4 Medium	James Golovich	Yes
2022-10-03 00:00	Beebee Mini <= 1.2.0 - Unauthorized File Upload via ACF Beebee Mini <= 1.2.0	`CVE-2022-2594`	4.3 Medium	James Golovich	Yes
2022-07-14 00:00	Advanced Custom Fields <= 5.12.2 - File Upload Advanced Custom Fields (ACF®) <= 5.12.2	`CVE-2022-2594`	4.3 Medium	James Golovich	Yes
2020-02-19 00:00	WP All Import Pro < 4.1.1 - Reflected Cross Site Scripting WP All Import Pro < 4.1.1	`N/A`	6.1 Medium	James Golovich	Yes
2019-08-20 00:00	Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks WP All Import Pro < 4.1.1	`CVE-2015-9331`	7.5 High	James Golovich	Yes
2018-11-12 00:00	Orbit Fox by ThemeIsle <= 2.6.3 - Improper REST Capabilities Checks Orbit Fox <= 2.6.3	`N/A`	7.3 High	James Golovich	Yes
2017-11-27 00:00	Elementor Website Builder <= 1.7.12 - Missing Authorization Elementor Website Builder <= 1.7.12	`CVE-2017-18596`	8.8 High	James Golovich	Yes
2017-05-05 00:00	Download Monitor <= 1.9.6 - Missing Authorization Download Monitor <= 1.9.6	`N/A`	6.5 Medium	James Golovich	Yes
2017-04-17 00:00	Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.0.31 - Arbitrary Wordpress Shortcode Injection Ninja Forms <= 3.0.31	`N/A`	5.3 Medium	James Golovich	Yes
2017-04-17 00:00	Ultimate Member <= 1.3.83 - Shortcode Injection Ultimate Member <= 1.3.83	`N/A`	9.8 Critical	James Golovich	Yes

Showing 1–10 of 50 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C