John Castro

2018201920202021202220232024

Critical

High

Medium

Low

Global Rank

#321

of 3,213 researchers

Vulns

14

Critical2

High3

Medium9

Low0

Affected Assets

13

13plugins

Avg CVSS

6.8

Average score of vulnerabilities

Researcher Submissions

14 records


2024-09-19 00:00	TI WooCommerce Wishlist <= 2.9.0 - Unauthenticated SQL Injection via 'lang' TI WooCommerce Wishlist <= 2.9.0	`CVE-2024-9156`	7.5 High	John Castro	Yes
2024-09-02 00:00	YITH WooCommerce Ajax Search <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting YITH WooCommerce Ajax Search <= 2.7.0	`CVE-2024-7846`	6.4 Medium	John Castro	Yes
2024-08-13 00:00	User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.1 - Authenticated (Admin+) Stored Cross-Site Scripting User Profile Builder <= 3.12.1	`CVE-2024-6708`	4.4 Medium	John Castro	Yes
2024-07-10 00:00	User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.8 - Authentication Bypass User Profile Builder <= 3.11.8	`CVE-2024-6695`	9.8 Critical	John Castro	Yes
2022-05-04 10:07	Andrea Pernici News Sitemap for Google <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting Andrea Pernici News Sitemap for Google <= 1.0.16	`CVE-2021-36912`	5.4 Medium	John Castro	No
2021-12-15 14:44	Image Hover Effects Ultimate <= 9.6.1 - Unauthenticated Arbitrary Options Update Image Hover Effects Ultimate ( Image Ga… <= 9.6.1	`CVE-2021-36888`	9.8 Critical	John Castro	Yes
2021-10-07 10:22	Comment Engine Pro <= 1.0 - Authenticated (Editor+) Stored Cross-Site Scripting Comment Engine Pro <= 1.0	`CVE-2021-36911`	5.5 Medium	John Castro	No
2021-02-24 00:00	Woocommerce Customers Manager <= 26.4 - Authenticated Account Creation and Privilege Escalation WooCommerce Customers Manager < 26.5	`N/A`	8.8 High	John Castro	Yes
2020-09-05 00:00	NextScripts: Social Networks Auto-Poster <= 4.3.17 - Missing Authorization NextScripts <= 4.3.17	`CVE-2020-36831`	5.0 Medium	John Castro	Yes
2020-06-22 00:00	YITH WooCommerce Ajax Product Filter <= 3.11.0 - Cross-Site Scripting YITH WooCommerce Ajax Product Filter < 3.11.1	`N/A`	6.1 Medium	John Castro	Yes

Showing 1–10 of 14 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C