Noah Stead (TurtleBurg)

20242025

Critical

High

Medium

Low

Global Rank

#293

of 3,238 researchers

Vulns

16

Critical0

High3

Medium13

Low0

Affected Assets

15

15plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

16 records


2025-06-05 17:43	Anti-Spam: Spam Protection \| Block Spam Users, Comments, Forms <= 2024.7 - Cross-Site Request Forgery to Multiple Administrative Actions Stop Spammers Classic <= 2024.7	`CVE-2025-2935`	5.4 Medium	Noah Stead (TurtleBurg)	Yes
2025-05-06 12:55	Search Exclude <= 2.4.9 - Missing Authorization to Unauthenticated Plugin Settings Modification Search Exclude <= 2.4.9	`CVE-2025-2821`	5.3 Medium	Noah Stead (TurtleBurg)	Yes
2025-03-07 00:00	VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload VikRentCar Car Rental Management System <= 1.4.2	`CVE-2024-11640`	8.8 High	Noah Stead (TurtleBurg)	Yes
2025-02-20 15:01	WPUpper Share Buttons <= 3.51 - Cross-Site Request Forgery to Custom CSS Update WPUpper Share Buttons <= 3.51	`CVE-2024-13883`	4.3 Medium	Noah Stead (TurtleBurg)	Yes
2025-01-25 00:00	VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload VikBooking Hotel Booking Engine & PMS <= 1.7.2	`CVE-2024-11641`	8.8 High	Noah Stead (TurtleBurg)	Yes
2025-01-08 00:00	WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 - Unauthenticated Database Back-Up Exposure WP Database Backup <= 7.3	`CVE-2024-12330`	7.5 High	Noah Stead (TurtleBurg)	Yes
2025-01-08 00:00	Wordpress Header Builder Plugin <= 1.3.8 - Cross-Site Request Forgery to Header Deletion Pearl <= 1.3.8	`CVE-2024-12206`	4.3 Medium	Noah Stead (TurtleBurg)	Yes
2025-01-07 00:00	Easy Form Builder <= 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting Easy Form Builder by WhiteStudio <= 3.8.8	`CVE-2024-12112`	6.4 Medium	Noah Stead (TurtleBurg)	Yes
2024-12-18 00:00	WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API Project Manager <= 2.6.15	`CVE-2024-10548`	6.5 Medium	Noah Stead (TurtleBurg)	Yes
2024-12-11 00:00	Hash Form <= 1.2.1 - Missing Authorization to Authenticated (Contributor+) Form Style Creation Hash Form <= 1.2.1	`CVE-2024-12201`	4.3 Medium	Noah Stead (TurtleBurg)	Yes

Showing 1–10 of 16 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C