Aymane Mazguiti

Aymane Mazguiti is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #807 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (80%). Other recurring categories include SQL Injection. The average CVSS score across these disclosures is 4.8, peaking at 6.6.

The most affected software includes Custom Base Terms (1), Get your number (1), Ultimate Dashboard (1), across 5 distinct plugins, themes and core versions in total.

4 of the 5 disclosed issues have a vendor fix, while 1 remain unpatched.

2023

Critical

High

Medium

Low

Global Rank

#807

of 3,515 researchers

Vulns

Critical0

High0

Medium5

Low0

Affected Assets

5plugins

Avg CVSS

4.8

Average score of vulnerabilities

Researcher Submissions

5 records


2023-06-05 00:00	Ultimate Product Catalog <= 5.2.5 - Authenticated(Administrator+) Stored Cross-Site Scripting Ultimate Product Catalog <= 5.2.5	`CVE-2023-2711`	4.4 Medium	Ilyase Dehy	Yes
2023-05-25 00:00	User Activity Log <= 1.6.2 - Authenticated(Administrator+) SQL Injection via txtsearch User Activity Log <= 1.6.2	`CVE-2023-2761`	6.6 Medium	Ilyase Dehy	Yes
2023-05-21 00:00	Ultimate Dashboard <= 3.7.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings Ultimate Dashboard < 3.7.6	`CVE-2023-2812`	4.4 Medium	Ilyase Dehy	Yes
2023-05-12 00:00	Get Your Number <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Get your number <= 1.1.3	`CVE-2023-2634`	4.4 Medium	Ilyase Dehy	No
2023-05-10 00:00	Custom Base Terms <= 1.0.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'base' Custom Base Terms <= 1.0.2.3	`CVE-2023-2600`	4.4 Medium	Ilyase Dehy	Yes

Showing 1–5 of 5 reports