Aman Rawat

Aman Rawat is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #487 of 3,515 contributors. Their disclosures were published between 2022 and 2026. The most productive year was 2023, with 7 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (44%). Other recurring categories include Missing Authorization, Server-Side Request Forgery (SSRF). The average CVSS score across these disclosures is 6.2, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Login with YourMembership (2), Paytm Payment Gateway (2), Stock Ticker (2), across 6 distinct plugins, themes and core versions in total.

8 of the 9 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Paytm Payment Gateway <= 2.7.3 - Authenticated (Editor+) SQL Injection via 'post'", scores 8.8 out of 10.

20222023202420252026

Critical

High

Medium

Low

Global Rank

#487

of 3,515 researchers

Vulns

Critical0

High2

Medium7

Low0

Affected Assets

6plugins

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

9 records


2026-03-16 00:00	Modern Events Calendar <= 7.32.0 - Missing Authorization Modern Events Calendar <= 7.32.0	`CVE-2026-32583`	5.3 Medium	Aman Rawat	Yes
2023-08-11 00:00	Stock Ticker <= 3.23.3 - Reflected Cross-Site Scripting in ajax_stockticker_load Stock Ticker <= 3.23.3	`CVE-2023-40208`	6.1 Medium	Aman Rawat	Yes
2023-08-10 00:00	Stock Ticker <= 3.23.2 - Reflected Cross-Site Scripting in ajax_stockticker_symbol_search_test Stock Ticker <= 3.23.2	`CVE-2022-45365`	6.1 Medium	Aman Rawat	Yes
2023-07-17 00:00	YourMembership Single Sign On <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings Login with YourMembership <= 1.1.3	`CVE-2023-37986`	4.4 Medium	Aman Rawat	Yes
2023-07-17 00:00	YourMembership Single Sign On <= 1.1.3 - Missing Authorization Login with YourMembership <= 1.1.3	`CVE-2023-37987`	6.5 Medium	Aman Rawat	Yes
2023-03-13 00:00	Exxp <= 2.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting Exxp <= 2.6.9	`CVE-2022-45812`	6.4 Medium	Aman Rawat	No
2023-03-13 00:00	PhonePe Payment Solutions <= 1.0.15 - Authenticated (Subscriber+) Server-Side Request Forgery PhonePe Payment Solutions <= 1.0.15	`CVE-2022-45835`	5.0 Medium	Aman Rawat	Yes
2023-02-22 00:00	Paytm Payment Gateway <= 2.7.3 - Authenticated (Editor+) SQL Injection via 'post' Paytm Payment Gateway <= 2.7.3	`CVE-2022-45805`	8.8 High	Aman Rawat	Yes
2022-11-29 00:00	Paytm Payment Gateway <= 2.7.0 - Unauthenticated Server-Side Request Forgery Paytm Payment Gateway <= 2.7.0	`CVE-2022-45362`	7.2 High	Aman Rawat	Yes

Showing 1–9 of 9 reports