Ashiyane Digital Security Team

Ashiyane Digital Security Team is a security researcher credited with 44 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #137 of 3,515 contributors. Their disclosures were published between 2011 and 2015. The most productive year was 2013, with 14 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 17 of their findings (39%). Other recurring categories include SQL Injection, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 7.8, peaking at 9.8. Severity breakdown: 17 critical and 8 high.

The most affected software includes SpiderVPlayer (2), WordPress Spreadsheet (2), xPinner Lite (2), across 41 distinct plugins, themes and core versions in total.

8 of the 44 disclosed issues have a vendor fix, while 36 remain unpatched. The most severe finding, "WP Forum <= 2.4 - SQL Injection", scores 9.8 out of 10.

20112012201320142015

Critical

High

Medium

Low

Global Rank

#137

of 3,515 researchers

Vulns

Critical17

High8

Medium19

Low0

Affected Assets

34plugins7themes

Avg CVSS

7.8

Average score of vulnerabilities

Researcher Submissions

44 records


2015-09-17 00:00	XPinner Lite <= 2.2 - Cross-Site Scripting xPinner Lite <= 2.2	`CVE-2015-9407`	6.1 Medium	Ashiyane Digital Security Team	No
2015-09-14 00:00	xPinner Lite <= 2.2 - Cross-Site Request Forgery xPinner Lite <= 2.2	`CVE-2015-9408`	8.8 High	Ashiyane Digital Security Team	No
2015-08-09 00:00	Bookmarkify <= 1.1.3 - Cross-Site Request Forgery to Cross-Site Scripting bookmarkify <= 1.1.3	`CVE-2015-9441`	5.4 Medium	Ashiyane Digital Security Team	No
2015-08-08 00:00	Monetize <= 1.03 - Cross-Site Request Forgery to Cross-Site Scripting Monetize <= 1.03	`CVE-2015-9440`	6.1 Medium	Ashiyane Digital Security Team	No
2015-05-15 00:00	WP Forum <= 2.4 - SQL Injection wp-forum <= 2.4	`N/A`	9.8 Critical	Ashiyane Digital Security Team	No
2015-05-15 00:00	Husker Portfolio <= 0.3 - Arbitrary File Upload Husker Portfolio <= 0.3	`N/A`	9.8 Critical	Ashiyane Digital Security Team	No
2015-04-16 00:00	WP-Mon <= 0.5.1 - Arbitrary File Download wp-mon <= 0.5.1	`N/A`	7.5 High	Ashiyane Digital Security Team	No
2015-03-27 00:00	Aspose Cloud eBook Generator <= 1.0 - Directory Traversal Aspose Cloud eBook Generator… <= 1.0	`N/A`	5.3 Medium	Ashiyane Digital Security Team	Yes
2015-01-26 00:00	RedSteel (All Versions) - File Disclosure RedSteel *	`N/A`	7.5 High	Ashiyane Digital Security Team	No
2015-01-09 00:00	Slideoptinprox (Unspecified Version) - Cross-Site Scripting Slideoptinprox *	`N/A`	6.1 Medium	Ashiyane Digital Security Team	No

Showing 1–10 of 44 reports