Muhammad Daffa

2021202220232024

Critical

High

Medium

Low

Global Rank

#52

of 3,238 researchers

Vulns

144

Critical5

High30

Medium107

Low2

Affected Assets

138

138plugins

Avg CVSS

6.1

Average score of vulnerabilities

Researcher Submissions

144 records


2024-12-05 00:00	Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.7 - Missing Authorization Pinpoint Booking System <= 2.9.9.5.7	`CVE-2024-54252`	6.3 Medium	Muhammad Daffa	Yes
2024-10-15 00:00	Edwiser Bridge <= 3.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting Edwiser Bridge <= 3.0.7	`CVE-2024-49311`	6.4 Medium	Muhammad Daffa	Yes
2024-10-15 00:00	Edwiser Bridge <= 3.0.7 - Authenticated (Subscriber+) Server-Side Request Forgery Edwiser Bridge <= 3.0.7	`CVE-2024-49312`	6.4 Medium	Muhammad Daffa	Yes
2024-10-15 00:00	Pinpoint Booking System <= 2.9.9.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting Pinpoint Booking System <= 2.9.9.5.7	`CVE-2024-49304`	6.1 Medium	Muhammad Daffa	Yes
2024-10-15 00:00	WordPress Portfolio Builder – Portfolio Gallery <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting WordPress Portfolio Builder <= 1.1.7	`CVE-2024-49302`	6.4 Medium	Muhammad Daffa	No
2024-08-29 00:00	EasyJobs <= 2.4.14 - Reflected Cross-Site Scripting easy.jobs <= 2.4.14	`CVE-2024-43997`	6.1 Medium	Muhammad Daffa	Yes
2024-08-29 00:00	Like Button Rating <= 2.6.53 - Cross-Site Request Forgery Like Button Rating ♥ LikeBtn <= 2.6.53	`CVE-2024-44064`	6.1 Medium	Muhammad Daffa	Yes
2024-08-28 00:00	Podlove Podcast Publisher <= 4.1.13 - Cross-Site Request Forgery to Remote Code Execution Podlove Podcast Publisher <= 4.1.13	`CVE-2024-43984`	8.8 High	Muhammad Daffa	Yes
2024-08-28 00:00	GetPaid <= 2.8.11 - Missing Authorization via column_subscription() Payment forms <= 2.8.11	`CVE-2024-43973`	4.3 Medium	Muhammad Daffa	Yes
2024-08-28 00:00	Podlove Podcast Publisher <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting Podlove Podcast Publisher <= 4.1.13	`CVE-2024-43983`	6.4 Medium	Muhammad Daffa	Yes

Showing 1–10 of 144 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C