Lester 'GaMerZ' Chan
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP-DownloadManager (WordPress) | 2 | – | Mar 25, 2022 |
| WP-PostRatings | 2 | – | Aug 1, 2024 |
| WP-CommentNavi | 1 | – | Mar 23, 2023 |
| WP-DownloadManager (WordPress plugin) | 1 | – | Mar 18, 2022 |
| WP-Polls (WordPress plugin) | 1 | – | Nov 18, 2022 |
| WP-PostRatings (WordPress plugin) | 1 | – | Sep 9, 2022 |
Exploited and recent CVEs
- CVE-2024-39659 WordPress WP-PostRatings plugin <= 1.91.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2023-40332 WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability 0.4%
- CVE-2023-22715 WordPress WP-CommentNavi Plugin <= 1.12.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2022-40130 WordPress WP-Polls plugin <= 2.76.0 - Auth. Race Condition vulnerability 0.4%
- CVE-2022-36422 WP-PostRatings plugin <= 1.89 - Rating increase/decrease via race condition 0.5%
- CVE-2022-25606 WordPress WP-DownloadManager plugin <= 1.68.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities 0.6%
- CVE-2022-25605 WordPress WP-DownloadManager plugin <= 1.68.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities 0.6%
- CVE-2021-44760 WordPress WP-DownloadManager plugin <= 1.68.6 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability 0.5%