Am!r

Am!r is a security researcher credited with 14 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #344 of 3,515 contributors. Their disclosures were published between 2011 and 2014. The most productive year was 2011, with 7 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 13 of their findings (93%). Other recurring categories include SQL Injection. The average CVSS score across these disclosures is 6.6, peaking at 9.8. Severity breakdown: 1 critical and 3 high.

The most affected software includes Adminimize (1), Advanced Text Widget (1), Album and Image Gallery with Lightbox (1), across 14 distinct plugins, themes and core versions in total.

10 of the 14 disclosed issues have a vendor fix, while 4 remain unpatched. The most severe finding, "TagGator Plugin < 1.33 - SQL Injection", scores 9.8 out of 10.

2011201220132014

Critical

High

Medium

Low

Global Rank

#344

of 3,515 researchers

Vulns

Critical1

High3

Medium10

Low0

Affected Assets

14plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

14 records


2014-08-01 00:00	Adminimize < 1.7.22 - Cross-Site Scripting Adminimize < 1.7.22	`CVE-2011-5128`	5.3 Medium	Am!r	Yes
2014-08-01 00:00	Newsletter Meenews <= 5.1.0 - Cross-Site Scripting Newsletter Meenews <= 5.1.0	`N/A`	7.1 High	Am!r	Yes
2012-11-21 00:00	Advanced Text Widget <= 2.0.1 - Cross-Site Scripting Advanced Text Widget <= 2.0.1	`CVE-2011-4618`	6.1 Medium	Am!r	Yes
2012-04-30 00:00	WPsc MijnPress <= 0.0.1 - Cross-Site Scripting WPsc MijnPress <= 0.0.1	`N/A`	8.3 High	Am!r	No
2012-04-05 00:00	TagGator Plugin < 1.33 - SQL Injection TagGator < 1.33	`N/A`	9.8 Critical	Am!r	Yes
2012-01-08 00:00	YouSayToo auto-publishing plugin <= 1.0 - Cross-Site Scripting YouSayToo auto-publishing plugin <= 1.0	`CVE-2012-0901`	6.1 Medium	H4ckCity Security Team & IrIsT.Ir	No
2012-01-01 00:00	WP Live.php <= 1.2.1 - Cross-Site Scripting WP Live.php <= 1.2.1	`CVE-2012-5346`	6.1 Medium	Am!r	Yes
2011-12-04 00:00	Pretty Links – Link Management, Branding, Tracking & Sharing Plugin < 1.5.6 - Reflected Cross-Site Scripting PrettyLinks < 1.5.6	`CVE-2011-4595`	6.1 Medium	Am!r	Yes
2011-11-30 00:00	Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 1.57 - Cross-Site Scripting Album and Image Gallery with Lightbox < 1.57	`CVE-2011-4624`	6.1 Medium	Am!r	Yes
2011-11-30 00:00	ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML5 <= 1.11 - Reflected Cross-Site Scripting ZooEffect Plugin for Video player <= 1.11	`CVE-2011-5180`	6.1 Medium	Am!r	No

Showing 1–10 of 14 reports