Adrián M. F.

Adrián M. F. is a security researcher credited with 6 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #640 of 3,515 contributors. The disclosure was published in 2015.

Their research concentrates on SQL Injection, which accounts for 4 of their findings (67%). Other recurring categories include Cross-Site Scripting. The average CVSS score across these disclosures is 8.0, peaking at 9.8. Severity breakdown: 1 critical and 3 high.

The most affected software includes NewStatPress (2), WordPress Landing Pages (2), FeedWordPress (1), across 4 distinct plugins, themes and core versions in total.

All 6 disclosed issues have since received a vendor fix. The most severe finding, "FeedWordPress < 2015.0514 - SQL Injection", scores 9.8 out of 10.

2015

Critical

High

Medium

Low

Global Rank

#640

of 3,515 researchers

Vulns

Critical1

High3

Medium2

Low0

Affected Assets

4plugins

Avg CVSS

8.0

Average score of vulnerabilities

Researcher Submissions

6 records


2015-05-26 00:00	GigPress <= 2.3.8 - SQL Injection GigPress < 2.3.9	`CVE-2015-4066`	8.8 High	Adrián M. F.	Yes
2015-05-25 00:00	WordPress Landing Pages <= 1.8.4 - Authenticated SQL Injection WordPress Landing Pages < 1.8.5	`CVE-2015-4064`	8.8 High	Adrián M. F.	Yes
2015-05-25 00:00	NewStatPress <= 0.9.8 - Authenticated SQL Injection NewStatPress <= 0.9.8	`CVE-2015-4062`	8.8 High	Adrián M. F.	Yes
2015-05-25 00:00	NewStatPress <= 0.9.8 - Authenticated Cross-Site Scripting NewStatPress <= 0.9.8	`CVE-2015-4063`	5.4 Medium	Adrián M. F.	Yes
2015-05-25 00:00	WordPress Landing Pages <= 1.8.4 - Cross-Site Scripting WordPress Landing Pages < 1.8.5	`CVE-2015-4065`	6.5 Medium	Adrián M. F.	Yes
2015-05-19 00:00	FeedWordPress < 2015.0514 - SQL Injection FeedWordPress < 2015.0514	`CVE-2015-4018`	9.8 Critical	Adrián M. F.	Yes

Showing 1–6 of 6 reports