Antony Garand

Antony Garand is a security researcher credited with 15 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #331 of 3,515 contributors. Their disclosures were published between 2015 and 2020. The most productive year was 2020, with 9 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 12 of their findings (80%). Other recurring categories include SQL Injection, Path Traversal. The average CVSS score across these disclosures is 6.5, peaking at 9.4. Severity breakdown: 1 critical and 3 high.

The most affected software includes Ultimate Member (3), Addon Elements for Elementor (formerly… (1), Advanced Ads – Ad Manager & AdSense (1), across 13 distinct plugins, themes and core versions in total.

All 15 disclosed issues have since received a vendor fix. The most severe finding, "Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.0.45 - Arbitrary File Deletion/Read", scores 9.4 out of 10.

201520162017201820192020

Critical

High

Medium

Low

Global Rank

#331

of 3,515 researchers

Vulns

Critical1

High3

Medium11

Low0

Affected Assets

15plugins

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

15 records


2020-09-08 00:00	All In One WP Security & Firewall <= 4.4.3 - Reflected Cross-Site Scripting All-In-One Security (AIOS) <= 4.4.3	`N/A`	4.7 Medium	Antony Garand	Yes
2020-09-08 00:00	Sticky Menu & Sticky Header <= 2.20 - Reflected Cross-Site Scripting Sticky Menu & Sticky Header < 2.21	`N/A`	6.1 Medium	Antony Garand	Yes
2020-09-08 00:00	Cookiebot \| GDPR/CCPA Compliant Cookie Consent and Control <= 3.6.0 - Reflected Cross-Site Scripting Cookiebot by Usercentrics < 3.6.1	`N/A`	6.1 Medium	Antony Garand	Yes
2020-09-08 00:00	Elementor Addon Elements <= 1.6.3 - Reflected Cross-Site Scripting Addon Elements for Elementor (formerly… < 1.6.4	`N/A`	6.1 Medium	Antony Garand	Yes
2020-09-08 00:00	LearnPress <= 3.2.7.2 - Reflected Cross-Site Scripting LearnPress < 3.2.7.3	`N/A`	6.1 Medium	Antony Garand	Yes
2020-09-08 00:00	Custom Dashboard & Login Page – AGCA <= 6.5.4 - Reflected Cross-Site Scripting AGCA <= 6.5.4	`N/A`	6.1 Medium	Antony Garand	Yes
2020-06-07 00:00	Events Manager <= 5.9.7.3 - Admin+ SQL Injection Events Manager <= 5.9.7.3	`CVE-2020-35012`	7.2 High	Antony Garand	Yes
2020-04-25 00:00	Duplicate Page Plugins <= (Various Versions) - SQL Injection Duplicate Page and Post < 2.5.7	`N/A`	8.8 High	Antony Garand	Yes
2020-03-18 00:00	Advanced Ads <= 1.17.3 - Reflected Cross-Site Scripting Advanced Ads – Ad Manager & AdSense < 1.17.4	`N/A`	6.1 Medium	Antony Garand	Yes
2019-07-01 00:00	WP Statistics <= 12.6.6.1 - Unauthenticated Stored Cross-Site Scripting via IP Manipulation WP Statistics <= 12.6.6.1	`N/A`	7.2 High	Antony Garand	Yes

Showing 1–10 of 15 reports