villu164

20242025

Critical

High

Medium

Low

Global Rank

#249

of 3,238 researchers

Vulns

19

Critical4

High8

Medium7

Low0

Affected Assets

11

11plugins

Avg CVSS

7.5

Average score of vulnerabilities

Researcher Submissions

19 records


2025-01-13 17:58	W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery W3 Total Cache <= 2.8.1	`CVE-2024-12365`	8.5 High	villu164	Yes
2025-01-13 00:00	W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation W3 Total Cache <= 2.8.1	`CVE-2024-12006`	5.3 Medium	villu164	Yes
2025-01-13 00:00	W3 Total Cache <= 2.8.1 Information Exposure via Log Files W3 Total Cache <= 2.8.1	`CVE-2024-12008`	5.3 Medium	villu164	Yes
2025-01-07 00:00	InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading InfiniteWP Client <= 1.13.0	`CVE-2024-10585`	5.3 Medium	villu164	Yes
2024-12-09 00:00	WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation WPForms 1.8.4 – 1.9.2.1	`CVE-2024-11205`	8.5 High	villu164	Yes
2024-10-21 16:33	All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs All-in-One WP Migration and Backup <= 7.86	`CVE-2024-8852`	5.3 Medium	villu164	Yes
2024-08-19 13:55	GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution GiveWP <= 3.14.1	`CVE-2024-5932`	10.0 Critical	villu164	Yes
2024-08-19 00:00	GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletion GiveWP <= 3.14.1	`CVE-2024-5941`	5.4 Medium	villu164	Yes
2024-08-19 00:00	GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information Exposure GiveWP <= 3.13.0	`CVE-2024-5939`	5.3 Medium	villu164	Yes
2024-08-19 00:00	GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings Update GiveWP <= 3.13.0	`CVE-2024-5940`	6.5 Medium	villu164	Yes

Showing 1–10 of 19 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C