← All credits
thiennv (Patchstack Alliance)
134 vulnerability records and advisories credit this contributor.
CVE-2023-46620
WordPress DeepL Pro API translation Plugin <= 2.3.9.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-46616
WordPress Draw Attention plugin <= 2.0.15 - Broken Access Control vulnerability
CVE-2023-46312
WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-46152
WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-46087
WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-46080
WordPress ApplyOnline – Application Form Builder and Manager plugin <= 2.5.3 - Broken Access Control vulnerability
CVE-2023-45836
WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-45837
WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-45772
WordPress Proofreading Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-45829
WordPress Newsletter & Bulk Email Sender Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)