6Scan

6Scan is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,011 of 3,515 contributors. Their disclosures were published between 2011 and 2012. The most productive year was 2012, with 2 findings.

Their research concentrates on Unrestricted Upload Of File With Dangerous Type, which accounts for 2 of their findings (67%). Other recurring categories include Cross-Site Scripting. The average CVSS score across these disclosures is 8.6, peaking at 9.8. Severity breakdown: 2 critical and 0 high.

The most affected software includes AllWebMenus WordPress Menu Plugin (2), TheCartPress eCommerce Shopping Cart (1), across 2 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix. The most severe finding, "AllWebMenus WordPress Menu Plugin <= 1.1.8 - Arbitrary File Upload", scores 9.8 out of 10.

20112012

Critical

High

Medium

Low

Global Rank

#1011

of 3,515 researchers

Vulns

Critical2

High0

Medium1

Low0

Affected Assets

2plugins

Avg CVSS

8.6

Average score of vulnerabilities

Researcher Submissions

3 records


2012-01-22 00:00	AllWebMenus WordPress Menu Plugin <= 1.1.8 - Arbitrary File Upload AllWebMenus WordPress Menu Plugin <= 1.1.8	`CVE-2012-1011`	9.8 Critical	6Scan	Yes
2012-01-19 00:00	AllWebMenus WordPress Menu Plugin < 1.1.9 - Arbitrary File Upload AllWebMenus WordPress Menu Plugin < 1.1.9	`CVE-2012-1010`	9.8 Critical	6Scan	Yes
2011-12-31 00:00	TheCartPress eCommerce Shopping Cart <= 1.1.5 - Cross-Site Scripting TheCartPress eCommerce Shopping Cart <= 1.1.5	`CVE-2011-5207`	6.1 Medium	6Scan	Yes

Showing 1–3 of 3 reports