Ajay Sandipan Thorbole

Ajay Sandipan Thorbole is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #876 of 3,515 contributors. The disclosure was published in 2021.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Improper Neutralization Of Formula Elements In A CSV File. The average CVSS score across these disclosures is 6.8, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Sign-up Sheets (2), Request a Quote (1), Verse-O-Matic (1), across 3 distinct plugins, themes and core versions in total.

3 of the 4 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Verse-O-Matic <= 4.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting", scores 8.8 out of 10.

2021

Critical

High

Medium

Low

Global Rank

#876

of 3,515 researchers

Vulns

Critical0

High2

Medium2

Low0

Affected Assets

3plugins

Avg CVSS

6.8

Average score of vulnerabilities

Researcher Submissions

4 records


2021-07-19 00:00	Verse-O-Matic <= 4.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting Verse-O-Matic <= 4.1.1	`CVE-2021-24466`	8.8 High	Ajay Sandipan Thorbole	No
2021-06-21 00:00	Sign-up Sheets <= 1.0.13 - Authenticated CSV Injection Sign-up Sheets < 1.0.14	`CVE-2021-24441`	8.0 High	Ajay Sandipan Thorbole	Yes
2021-06-21 00:00	Sign-up Sheets <= 1.0.13 - Stored Cross-Site Scripting Sign-up Sheets < 1.0.14	`CVE-2021-24440`	4.8 Medium	Ajay Sandipan Thorbole	Yes
2021-06-16 00:00	Request a Quote <= 2.3.3 - Authenticated Stored Cross-Site Scripting Request a Quote < 2.3.4	`CVE-2021-24420`	5.4 Medium	Ajay Sandipan Thorbole	Yes

Showing 1–4 of 4 reports