Researchers
Back
Rio Darmawan
#112
of 60,391
1211.2
Total CVSS
Vulnerabilities
·
185
Medium
142
High
43
PT-2026-52649
2026-06-26
8.8
CVE-2026-50741
Revive
Andserver
A bypass exists for a previous fix. The issue can be triggered by sending a disallowed but otherwise valid plugin identifier via the `type` variable or by utilizing the `ox.setChannelTargeting` XML-RPC API method.
PT-2024-12045
2024-12-09
5.3
CVE-2023-25048
Unknown
Fantastic Content Protector Free
The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels.
PT-2024-12098
2024-12-09
5.3
CVE-2023-26520
Unknown
Max Chirkov Advanced Text Widget
The issue is related to missing authorization, allowing exploitation of incorrectly configured access control security levels.
PT-2024-12950
2024-05-08
6.5
CVE-2023-41651
Unknown
Multi-Column Tag Map
The issue is related to a Missing Authorization vulnerability in the Multi-column Tag Map.
PT-2024-12060
2024-05-03
5.3
CVE-2023-25457
Unknown
Richteam Slider Carousel – Responsive Image Slider
The issue is related to a Missing Authorization vulnerability in the Richteam Slider Carousel – Responsive Image Slider.
PT-2023-21144
2023-11-22
8.8
CVE-2023-27458
WordPress
Xwp Stream
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-20708
2023-11-22
8.8
CVE-2023-26532
Accesspress Themes
Accesspress Themes Social Auto Poster
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application.
PT-2023-21143
2023-11-22
8.8
CVE-2023-27457
WordPress
Passionate Brains Add Expires Headers & Optimized Minify
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-20693
2023-11-12
8.8
CVE-2023-26514
WordPress
Wpgrim Dynamic Xml Sitemaps Generator
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21609
2023-11-12
8.8
CVE-2023-28173
WordPress
Amit Agarwal Google Xml Sitemap For Images
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21760
2023-11-12
8.8
CVE-2023-28497
Tribulant
Tribulant Slideshow Gallery
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to perform unintended actions on a web application that a user is authenticated to.
PT-2023-20700
2023-11-12
4.3
CVE-2023-26524
WordPress
Expresstech Quiz/Survey Master
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21129
2023-11-12
8.8
CVE-2023-27441
Unknown
Gl Spice New Adman Plugin
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21603
2023-11-12
8.8
CVE-2023-28167
Vsourz Digital
Vsourz Digital Cf7 Invisible Recaptcha Plugin
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21249
2023-11-12
8.8
CVE-2023-27611
WordPress
Audrasjb Reusable Blocks Extended
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-20697
2023-11-12
8.8
CVE-2023-26518
Accesspress Themes
Accesspress Themes Wp Tfeed Plugin
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21123
2023-11-12
8.8
CVE-2023-27434
WordPress
Wpgrim Classic Editor/Classic Widgets
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21133
2023-11-12
8.8
CVE-2023-27445
Meril
Meril Inc. Blog Floating Button Plugin
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21125
2023-11-12
8.8
CVE-2023-27436
Unknown
Louis Reingold Elegant Custom Fonts
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-22717
2023-11-10
8.8
CVE-2023-30478
Tribulant
Tribulant Newsletters Plugin
The issue is a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to.