Akastep

Akastep is a security researcher credited with 7 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #575 of 3,515 contributors. Their disclosures were published between 2013 and 2014. The most productive year was 2013, with 5 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 2 of their findings (29%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Code Injection. The average CVSS score across these disclosures is 7.1, peaking at 8.8. Severity breakdown: 0 critical and 4 high.

The most affected software includes LayerSlider (2), Sahifa (2), Spam Free WordPress (2), across 4 distinct plugins, themes and core versions in total.

All 7 disclosed issues have since received a vendor fix. The most severe finding, "LayerSlider <= 4.6.1 - Cross-Site Request Forgery", scores 8.8 out of 10.

20132014

Critical

High

Medium

Low

Global Rank

#575

of 3,515 researchers

Vulns

Critical0

High4

Medium3

Low0

Affected Assets

3plugins1theme

Avg CVSS

7.1

Average score of vulnerabilities

Researcher Submissions

7 records


2014-08-01 00:00	LayerSlider <= 4.6.1 - Cross-Site Request Forgery LayerSlider <= 4.6.1	`N/A`	8.8 High	Akastep	Yes
2014-08-01 00:00	LayerSlider <= 4.6.1 - Path Traversal LayerSlider <= 4.6.1	`N/A`	6.5 Medium	Akastep	Yes
2013-01-08 00:00	Google XML Sitemaps Generator < 3.2.9 - Authenticated (Admin+) PHP Code Injection Google XML Sitemaps Generator <= 3.2.8	`N/A`	7.2 High	Akastep	Yes
2013-01-05 00:00	Spam Free WordPress <= 1.9.3 - IP Protection Bypass Spam Free WordPress <= 1.9.3	`N/A`	5.3 Medium	Akastep	Yes
2013-01-05 00:00	Spam Free WordPress <= 1.9.3 - Full Path Disclosure Spam Free WordPress <= 1.9.3	`N/A`	7.5 High	Akastep	Yes
2013-01-01 00:00	Sahifa <= 2.4.0 - Cross-Site Request Forgery Sahifa <= 2.4.0	`N/A`	8.8 High	Akastep	Yes
2013-01-01 00:00	Sahifa <= 2.4.0 - Full Path Disclosure Sahifa <= 2.4.0	`N/A`	5.3 Medium	Akastep	Yes

Showing 1–7 of 7 reports