Asif Nawaz Minhas

Asif Nawaz Minhas is a security researcher credited with 65 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #100 of 3,515 contributors. Their disclosures were published between 2021 and 2024. The most productive year was 2022, with 36 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 61 of their findings (94%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 5.6, peaking at 9.0. Severity breakdown: 1 critical and 2 high.

The most affected software includes enigma-chartjs (2), Export All URLs (2), Ad Injection (1), across 63 distinct plugins, themes and core versions in total.

57 of the 65 disclosed issues have a vendor fix, while 8 remain unpatched. The most severe finding, "Export any WordPress data to XML/CSV <= 1.3.4 - Authenticated SQL Injection", scores 9.0 out of 10.

2021202220232024

Critical

High

Medium

Low

Global Rank

#100

of 3,515 researchers

Vulns

Critical1

High2

Medium62

Low0

Affected Assets

64plugins

Avg CVSS

5.6

Average score of vulnerabilities

Researcher Submissions

65 records


2024-01-19 00:00	Chartjs <= 2023.2 - Authenticated(Editor+) Stored Cross-Site Scripting via chart enigma-chartjs <= 2023.2	`CVE-2023-6082`	4.4 Medium	Asif Nawaz Minhas	No
2024-01-19 00:00	Chartjs <= 2023.2 - Authenticated(Editor+) Stored Cross-Site Scripting enigma-chartjs <= 2023.2	`CVE-2023-6081`	4.4 Medium	Asif Nawaz Minhas	No
2022-11-20 00:00	Image Hover Effects <= 5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting Image Hover Effects <= 5.4	`CVE-2022-4010`	5.5 Medium	Asif Nawaz Minhas	Yes
2022-11-09 00:00	WP CSV Exporter <= 1.3.6 - Authenticated (Admin+) SQL Injection WP CSV Exporter <= 1.3.6	`CVE-2022-3249`	7.2 High	Asif Nawaz Minhas	Yes
2022-11-03 00:00	Image Hover Effects Css3 <= 4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting Image Hover Effects Css3 <= 4.5	`CVE-2022-3601`	5.5 Medium	Asif Nawaz Minhas	No
2022-11-02 00:00	Salat Times < = 3.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Salat Times <= 3.2.1	`CVE-2022-2983`	5.5 Medium	Asif Nawaz Minhas	Yes
2022-10-20 00:00	Testimonials (Free <= 2.6, Pro < 1.0.7) - Authenticated (Administrator+) Stored Cross-Site Scripting Super Testimonial <= 2.6	`CVE-2022-3539`	5.5 Medium	Asif Nawaz Minhas	Yes
2022-10-10 00:00	WP Contact Slider <= 2.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Contact Slider <= 2.4.7	`CVE-2022-3237`	5.5 Medium	Asif Nawaz Minhas	Yes
2022-09-27 00:00	Social Media Follow Buttons Bar <= 4.73 - Authenticated (Administrator+) Stored Cross-Site Scripting Social Media Follow Buttons Bar <= 4.73	`CVE-2021-36839`	5.5 Medium	Asif Nawaz Minhas	Yes
2022-09-26 00:00	Meks Easy Social Share <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting Meks Easy Social Share <= 1.2.7	`CVE-2022-2574`	5.5 Medium	Asif Nawaz Minhas	Yes

Showing 1–10 of 65 reports