0xB9

0xB9 is a security researcher credited with 26 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #206 of 3,515 contributors. Their disclosures were published between 2021 and 2022. The most productive year was 2021, with 19 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 14 of their findings (54%). Other recurring categories include Cross-Site Request Forgery (CSRF), PHP Remote File Inclusion. The average CVSS score across these disclosures is 6.6, peaking at 8.8. Severity breakdown: 0 critical and 7 high.

The most affected software includes Business Directory Plugin (6), VM Backups (2), Advanced Order Export For WooCommerce (1), across 20 distinct plugins, themes and core versions in total.

22 of the 26 disclosed issues have a vendor fix, while 4 remain unpatched. The most severe finding, "Business Directory Plugin – Easy Listing Directories for WordPress <= 5.11.1 - Cross-Site Request Forgery to Arbitrary Listing Export", scores 8.8 out of 10.

20212022

Critical

High

Medium

Low

Global Rank

#206

of 3,515 researchers

Vulns

Critical0

High7

Medium19

Low0

Affected Assets

20plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

26 records


2022-05-17 11:20	Popup Box <= 2.1.2 - Authenticated Local File Inclusion Popup Box <= 2.1.2	`CVE-2022-29445`	6.8 Medium	0xB9	Yes
2022-05-16 13:55	Counter Box <= 1.1.1 - Authenticated Local File Inclusion Counter Box <= 1.1.1	`CVE-2022-29446`	6.8 Medium	0xB9	Yes
2022-05-16 12:18	Hover Effects – easily create any hover effect <= 2.1 - Authenticated Local File Inclusion Hover Effects <= 2.1	`CVE-2022-29447`	6.8 Medium	0xB9	Yes
2022-05-16 06:54	Herd Effects <= 5.2 - Local File Inclusion Social Proof Popups & Real-Time… <= 5.2	`CVE-2022-29448`	7.2 High	0xB9	Yes
2022-04-09 00:00	Easy Google Maps <= 1.9.31 - Reflected Cross-Site Scripting Easy Google Maps <= 1.9.31	`CVE-2021-46780`	6.1 Medium	0xB9	Yes
2022-04-09 00:00	Pricing Table by Supsystic <= 1.9.4 - Reflected Cross-Site Scripting Pricing Table by Supsystic <= 1.9.4	`CVE-2021-46782`	6.1 Medium	0xB9	Yes
2022-04-09 00:00	Coming Soon by Supsystic <= 1.7.5 - Reflected Cross-Site Scripting Maintenance Mode by Supsystic <= 1.7.5	`CVE-2021-46781`	6.1 Medium	0xB9	Yes
2021-06-28 00:00	Post Grid <= 2.1.7 - Reflected Cross-Site Scripting Post Grid <= 2.1.7	`CVE-2021-24488`	6.1 Medium	0xB9	Yes
2021-05-06 00:00	PickPlugins Product Slider for WooCommerce <= 1.13.21 - Reflected Cross-Site Scripting Product Slider <= 1.13.21	`CVE-2021-24300`	6.1 Medium	0xB9	Yes
2021-04-23 00:00	Redirect 404 to parent < 1.3.1 - Reflected Cross-Site Scripting Redirect 404 to parent < 1.3.1	`CVE-2021-24286`	6.1 Medium	0xB9	Yes

Showing 1–10 of 26 reports