Akbar Kustirama

Akbar Kustirama is a security researcher credited with 20 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #260 of 3,515 contributors. The disclosure was published in 2024.

Their research concentrates on Cross-Site Scripting, which accounts for 17 of their findings (85%). Other recurring categories include Improper Neutralization Of Script-Related HTML Tags In A Web Page (Basic XSS), Missing Authorization. The average CVSS score across these disclosures is 5.1, peaking at 6.4.

The most affected software includes MapPress (3), YARPP (2), Bit Form (1), across 17 distinct plugins, themes and core versions in total.

All 20 disclosed issues have since received a vendor fix.

2024

Critical

High

Medium

Low

Global Rank

#260

of 3,515 researchers

Vulns

Critical0

High0

Medium20

Low0

Affected Assets

17plugins

Avg CVSS

5.1

Average score of vulnerabilities

Researcher Submissions

20 records


2024-12-24 00:00	Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure Bit Form <= 2.17.3	`CVE-2024-12190`	4.3 Medium	Akbar Kustirama	Yes
2024-11-15 21:33	Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Mapster WP Maps <= 1.6.0	`CVE-2024-10592`	6.4 Medium	Akbar Kustirama	Yes
2024-11-07 17:29	Simple Shortcode for Google Maps <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Simple Shortcode for Google Maps <= 1.5.4	`CVE-2024-10621`	6.4 Medium	Akbar Kustirama	Yes
2024-11-05 00:00	MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block MapPress <= 2.94.1	`CVE-2024-10715`	6.4 Medium	Akbar Kustirama	Yes
2024-06-18 00:00	YARPP – Yet Another Related Posts Plugin <= 5.30.9 - Authenticated(Administrator+) Cross-Site Scripting YARPP <= 5.30.9	`CVE-2023-6495`	4.4 Medium	Akbar Kustirama	Yes
2024-05-21 00:00	LuckyWP Table of Contents <= 2.1.5 - Authenticated (Administrator+) Cross-Site Scripting LuckyWP Table of Contents <= 2.1.4	`CVE-2023-6487`	4.4 Medium	Akbar Kustirama	Yes
2024-04-03 00:00	Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS Spectra Legacy <= 2.10.3	`CVE-2023-6486`	6.4 Medium	Akbar Kustirama	Yes
2024-04-02 00:00	Gutenberg Blocks by Kadence Blocks <= 3.2.17 - Authenticated(Editor+) Stored Cross-Site Scripting via Contact Form Message Settings Kadence Blocks <= 3.2.17	`CVE-2024-0598`	4.4 Medium	Akbar Kustirama	Yes
2024-03-12 00:00	WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Go Maps <= 9.0.32	`CVE-2023-4839`	4.4 Medium	Marco Wotschka	Yes
2024-03-01 00:00	Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback Master Slider <= 3.9.9	`CVE-2024-0611`	4.4 Medium	Akbar Kustirama	Yes

Showing 1–10 of 20 reports