0xdecafbad

0xdecafbad is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #846 of 3,515 contributors. Their disclosures were published between 2021 and 2022. The most productive year was 2022, with 2 findings.

Their research concentrates on SQL Injection, which accounts for 4 of their findings (100%). The average CVSS score across these disclosures is 7.6, peaking at 8.8. Severity breakdown: 0 critical and 4 high.

The most affected software includes ExportFeed (1), Sync WooCommerce Product feed… (1), Wow Countdowns (1), across 4 distinct plugins, themes and core versions in total.

None of the 4 disclosed issues have a published fix yet. The most severe finding, "WPcalc – Create any online calculators <= 2.1 - SQL Injection", scores 8.8 out of 10.

20212022

Critical

High

Medium

Low

Global Rank

#846

of 3,515 researchers

Vulns

Critical0

High4

Medium0

Low0

Affected Assets

4plugins

Avg CVSS

7.6

Average score of vulnerabilities

Researcher Submissions

4 records


2022-03-07 00:00	Wow Countdowns <= 3.1.2 - Authenticated (Admin+) SQL Injection Wow Countdowns <= 3.1.2	`CVE-2021-25064`	7.2 High	0xdecafbad	No
2022-03-07 00:00	Sync WooCommerce Product feed to Google Shopping <= 1.2.4 - Authenticated (Admin+) SQL Injection Sync WooCommerce Product feed… <= 1.2.4	`CVE-2021-25068`	7.2 High	0xdecafbad	No
2021-12-06 00:00	WPcalc – Create any online calculators <= 2.1 - SQL Injection WPcalc <= 2.1	`CVE-2021-25054`	8.8 High	0xdecafbad	No
2021-11-22 00:00	ExportFeed <= 2.0.1.0 - SQL Injection ExportFeed <= 2.0.1.0	`CVE-2021-4208`	7.2 High	0xdecafbad	No

Showing 1–4 of 4 reports