realnits

CVEs

Security vulnerabilities I've discovered and responsibly disclosed.

16
Total CVEs
0
Critical
2
High
14
Medium / Low

2023 16

CVE-2023-45046 High (8.8) Published

Pressference Exporter <= 1.0.3 - Authenticated (Administrator+) SQL Injection

Authenticated (Administrator+) SQL Injection

Product: Pressference Exporter Vendor: WordPress Plugin Oct 2, 2023
CVE-2023-33209 High (8.8) Published

SEO Change Monitor <= 1.2 - Authenticated (Subscriber+) SQL Injection

Authenticated (Subscriber+) SQL Injection

Product: SEO Change Monitor Vendor: WordPress Plugin May 17, 2023
CVE-2023-47554 Medium (5.5) Published

Actueel Financieel Nieuws – Denk Internet Solutions <= 5.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings

Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings

Product: Actueel Financieel Nieuws – Denk Internet Solutions Vendor: WordPress Plugin Nov 6, 2023
CVE-2023-46643 Medium (6.1) Published

Download CloudNet360 <= 3.2.0 - Reflected Cross-Site Scripting

Reflected Cross-Site Scripting

Product: Download CloudNet360 Vendor: WordPress Plugin Oct 24, 2023
CVE-2023-40604 Medium (5.5) Published

Cookies by JM <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Authenticated (Administrator+) Stored Cross-Site Scripting

Product: Cookies by JM Vendor: WordPress Plugin Aug 20, 2023
CVE-2023-40007 Medium (5.5) Published

CT Commerce <= 2.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings

Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings

Product: CT Commerce Vendor: WordPress Plugin Aug 15, 2023
CVE-2023-25488 Medium (5.5) Published

WP Default Feature Image <= 1.0.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Authenticated (Administrator+) Stored Cross-Site Scripting

Product: WP Default Feature Image Vendor: WordPress Plugin Jul 9, 2023
CVE-2023-24397 Medium (5.5) Published

Reservation.Studio widget <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting

Authenticated (Administrator+) Stored Cross-Site Scripting

Product: Reservation.Studio widget Vendor: WordPress Plugin Jul 3, 2023
CVE-2023-33211 Medium (5.5) Published

WP-Piwik <= 1.0.27 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Display Name

Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Display Name

Product: WP-Piwik Vendor: WordPress Plugin May 21, 2023
CVE-2023-0603 Medium (6.1) Published

Sloth Logo Customizer <= 2.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Cross-Site Request Forgery to Stored Cross-Site Scripting

Product: Sloth Logo Customizer Vendor: WordPress Plugin Apr 16, 2023
CVE-2023-24372 Medium (5.5) Published

Simple Custom Author Profiles <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Authenticated (Administrator+) Stored Cross-Site Scripting

Product: Simple Custom Author Profiles Vendor: WordPress Plugin Mar 20, 2023
CVE-2023-24376 Medium (5.5) Published

WP Simple Events <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Authenticated (Administrator+) Stored Cross-Site Scripting

Product: WP Simple Events Vendor: WordPress Plugin Mar 16, 2023
CVE-2023-28166 Medium (6.1) Published

Tags Cloud Manager <= 1.0.0 - Reflected Cross-Site Scripting

Reflected Cross-Site Scripting

Product: Tags Cloud Manager Vendor: WordPress Plugin Mar 13, 2023
CVE-2023-28169 Medium (5.5) Published

Easy Event calendar <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Authenticated (Administrator+) Stored Cross-Site Scripting

Product: Easy Event calendar Vendor: WordPress Plugin Mar 13, 2023
CVE-2023-24404 Medium (6.1) Published

Marketing Performance <= 2.0.0 - Unauthenticated Stored Cross Site Scripting

Unauthenticated Stored Cross Site Scripting

Product: Marketing Performance Vendor: WordPress Plugin Feb 1, 2023
CVE-2023-25028 Medium (5.5) Published

CC Custom Taxonomy <= 1.0.1 - Authenticated (Administrator+) Cross Site Scripting

Authenticated (Administrator+) Cross Site Scripting

Product: CC Custom Taxonomy Vendor: WordPress Plugin Feb 1, 2023