Alex Sanford

Alex Sanford is a security researcher credited with 25 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #215 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Scripting, which accounts for 9 of their findings (36%). Other recurring categories include Cross-Site Request Forgery (CSRF), Path Traversal. The average CVSS score across these disclosures is 6.8, peaking at 9.8. Severity breakdown: 2 critical and 9 high.

The most affected software includes Awesome Support (2), EventPrime (2), File Manager Pro (2), across 22 distinct plugins, themes and core versions in total.

24 of the 25 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "WP Fastest Cache <= 1.2.1 - Unauthenticated SQL Injection", scores 9.8 out of 10.

2023
Critical
High
Medium
Low
Global Rank

#215

of 3,515 researchers

Vulns

25

Critical2
High9
Medium14
Low0
Affected Assets

23

23plugins
Avg CVSS

6.8

Average score of vulnerabilities

Researcher Submissions

25 records
2023-12-21 00:00CVE-2023-6620
7.2
High
Alex SanfordYes
2023-11-30 00:00CVE-2023-6166
6.1
Medium
Alex SanfordYes
2023-11-29 00:00CVE-2023-5939
7.2
High
Alex SanfordYes
2023-11-24 00:00CVE-2023-5886
8.8
High
Alex SanfordYes
2023-11-13 00:00CVE-2023-6063
9.8
Critical
Alex SanfordYes
2023-10-30 00:00CVE-2023-4252
5.3
Medium
Alex SanfordYes
2023-10-16 00:00CVE-2023-5355
8.1
High
Alex SanfordYes
2023-10-16 00:00CVE-2023-5354
6.1
Medium
Alex SanfordYes
2023-10-09 00:00CVE-2023-4251
4.3
Medium
Alex SanfordYes
2023-09-25 00:00CVE-2023-3279
4.9
Medium
Alex SanfordYes
Showing 1–10 of 25 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C