Arvandy

Arvandy is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #535 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2023, with 7 findings.

Their research concentrates on SQL Injection, which accounts for 4 of their findings (50%). Other recurring categories include Cross-Site Scripting, Missing Authorization. The average CVSS score across these disclosures is 6.4, peaking at 7.2. Severity breakdown: 0 critical and 3 high.

The most affected software includes Contact Form to Any API (2), ERP (2), Bravo Translate (1), across 6 distinct plugins, themes and core versions in total.

7 of the 8 disclosed issues have a vendor fix, while 1 remain unpatched.

20232024

Critical

High

Medium

Low

Global Rank

#535

of 3,515 researchers

Vulns

Critical0

High3

Medium5

Low0

Affected Assets

6plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

8 records


2024-01-05 00:00	WP ERP <= 1.12.8 - Authenticated (Accounting manager+) SQL Injection ERP <= 1.12.8	`CVE-2024-21747`	7.2 High	Arvandy	Yes
2023-11-28 00:00	Bravo Translate <= 1.2 - Authenticated (Administrator+) SQL Injection Bravo Translate <= 1.2	`CVE-2023-49161`	6.6 Medium	Arvandy	No
2023-11-23 00:00	TextMe SMS <= 1.9.0 - Missing Authorization via tetxme_update_option_page() TextMe SMS <= 1.9.0	`CVE-2023-48287`	4.3 Medium	Arvandy	Yes
2023-11-20 00:00	Contact Form to Any API <= 1.1.6 - Missing Authorization via delete_cf7_records() Contact Form to Any API <= 1.1.6	`CVE-2023-47871`	6.5 Medium	Arvandy	Yes
2023-07-17 00:00	Contact Form to Any API <= 1.1.2 - Authenticated (Administrator+) SQL Injection via 'form_id' Contact Form to Any API <= 1.1.2	`CVE-2023-32741`	7.2 High	Arvandy	Yes
2023-07-17 00:00	Contact Form Generator <= 2.5.5 - Reflected Cross-Site Scripting Contact Form Generator <= 2.5.5	`CVE-2023-37988`	6.1 Medium	Arvandy	Yes
2023-06-05 00:00	WP ERP <= 1.12.3 - Authenticated (Administrator+) SQL Injection via 'type' ERP < 1.12.4	`CVE-2023-2744`	7.2 High	Arvandy	Yes
2023-06-05 00:00	KiviCare <= 3.2.0 - Reflected Cross-Site Scripting via 'filterType' KiviCare < 3.2.1	`CVE-2023-2624`	6.1 Medium	Arvandy	Yes

Showing 1–8 of 8 reports