Abishiek Magesh

Abishiek Magesh is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #488 of 3,515 contributors. Their disclosures were published between 2021 and 2022. The most productive year was 2021, with 8 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 6 of their findings (67%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.2, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes Any Hostname (1), Blue Admin (1), Bookshelf (1), across 9 distinct plugins, themes and core versions in total.

1 of the 9 disclosed issues have a vendor fix, while 8 remain unpatched. The most severe finding, "Blue Admin <= 21.06.01 - Cross-Site Request Forgery", scores 8.8 out of 10.

20212022

Critical

High

Medium

Low

Global Rank

#488

of 3,515 researchers

Vulns

Critical0

High1

Medium8

Low0

Affected Assets

9plugins

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

9 records


2022-02-16 00:00	Simple Quotation <= 1.3.2 - Cross-Site Request Forgery Simple Quotation <= 1.3.2	`CVE-2022-22734`	6.1 Medium	Abishiek Magesh	No
2021-07-27 00:00	Blue Admin <= 21.06.01 - Cross-Site Request Forgery Blue Admin <= 21.06.01	`CVE-2021-24581`	8.8 High	Abishiek Magesh	No
2021-07-19 00:00	PhoneTrack Meu Site Manager <= 0.1 - Cross-Site Scripting PhoneTrack Meu Site Manager <= 0.1	`CVE-2021-24534`	6.4 Medium	Abishiek Magesh	Yes
2021-06-28 00:00	Any Hostname <= 1.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting Any Hostname <= 1.0.6	`CVE-2021-24481`	5.5 Medium	Abishiek Magesh	No
2021-06-28 00:00	Bookshelf <= 2.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting Bookshelf <= 2.0.4	`CVE-2021-24478`	5.5 Medium	Abishiek Magesh	No
2021-06-28 00:00	Event Geek <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting Event Geek <= 2.5.2	`CVE-2021-24480`	5.5 Medium	Abishiek Magesh	No
2021-06-28 00:00	Migrate Users <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting Migrate Users <= 1.0.1	`CVE-2021-24477`	6.1 Medium	Abishiek Magesh	No
2021-06-28 00:00	DrawBlog <= 0.90 - Authenticated (Admin+) Stored Cross-Site Scripting DrawBlog <= 0.90	`CVE-2021-24479`	5.5 Medium	Abishiek Magesh	No
2021-06-21 00:00	Glass <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting Glass <= 1.3.2	`CVE-2021-24434`	6.1 Medium	Abishiek Magesh	No

Showing 1–9 of 9 reports