← All credits
Vulnerability discovered by Muhammad Daffa (Patchstack Alliance)
27 vulnerability records and advisories credit this contributor.
CVE-2022-38704
WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-38470
WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-38137
WordPress Analytify plugin <= 4.2.2 - Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-38095
WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-38134
WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Authenticated Broken Access Control vulnerability
CVE-2022-38058
WordPress WP Shamsi plugin <= 4.1.1 - Authenticated Plugin Setting change vulnerability
CVE-2022-36340
WordPress MailOptin plugin <= 1.2.49.0 - Unauthenticated Optin Campaign Cache Deletion vulnerability
CVE-2022-36346
WordPress MaxButtons plugin <= 9.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
CVE-2022-36282
WordPress Search Exclude plugin <= 1.2.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
CVE-2022-35726
WordPress Video Gallery plugin <= 1.3.4.5 - Broken Authentication vulnerability