Ben Bidner

Ben Bidner is a security researcher credited with 13 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #361 of 3,515 contributors. Their disclosures were published between 2014 and 2023. The most productive year was 2022, with 4 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 7 of their findings (54%). Other recurring categories include Exposure Of Data Element To Wrong Session, Improper Authorization. The average CVSS score across these disclosures is 6.3, peaking at 8.8. Severity breakdown: 0 critical and 3 high.

The most affected software includes ActivityPub (2), WordPress 6.0 (2), SyntaxHighlighter Evolved (1), across 11 distinct plugins, themes and core versions in total.

All 13 disclosed issues have since received a vendor fix. The most severe finding, "WordPress Core < 6.0.3 - Reflected Cross-Site Scripting via SQL Injection", scores 8.8 out of 10.

2014201520162017201820192020202120222023

Critical

High

Medium

Low

Global Rank

#361

of 3,515 researchers

Vulns

Critical0

High3

Medium9

Low1

Affected Assets

2plugins9core versions

Avg CVSS

6.3

Average score of vulnerabilities

Researcher Submissions

13 records


2023-09-25 00:00	ActivityPub <= 0.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content ActivityPub <= 0.17.0	`CVE-2023-3746`	6.4 Medium	Ben Bidner	Yes
2023-09-25 00:00	ActivityPub <= 0.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via User Metadata ActivityPub <= 0.17.0	`CVE-2023-5057`	6.4 Medium	Ben Bidner	Yes
2022-10-18 00:00	WordPress Core < 6.0.3 - Shared User Instance Weakness WordPress 6.0 3.6.1 – 6.0.2 · 25 branches	`N/A`	3.7 Low	Ben Bidner	Yes
2022-10-18 00:00	WordPress Core < 6.0.3 - Reflected Cross-Site Scripting via SQL Injection WordPress 6.0 3.6.1 – 6.0.2 · 25 branches	`CVE-2022-43497`	8.8 High	Ben Bidner	Yes
2022-03-11 00:00	WordPress Core 5.9 - 5.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting WordPress 5.9 5.9 – < 5.9.2	`N/A`	6.4 Medium	Ben Bidner	Yes
2022-01-06 00:00	WordPress Core < 5.8.3 - SQL Injection via WP_Meta_Query WordPress 5.8 4.1 – < 5.8.3 · 18 branches	`CVE-2022-21664`	7.4 High	Ben Bidner	Yes
2020-06-10 00:00	WordPress Core < 5.4.2 - Open Redirect WordPress 5.3 3.7 – 5.3.3 · 18 branches	`CVE-2020-4048`	5.7 Medium	Ben Bidner	Yes
2020-04-29 00:00	WordPress Core < 5.4.1 - Cross-Site Scripting in the Block Editor WordPress 5.4 3.7 – 5.4 · 19 branches	`CVE-2020-11030`	6.4 Medium	Ben Bidner	Yes
2019-10-14 00:00	WordPress Core < 5.2.4 - Type Confusion WordPress 5.2 3.6.1 – 5.2.3 · 17 branches	`CVE-2019-17675`	5.5 Medium	Ben Bidner	Yes
2017-05-16 00:00	WordPress Core < 4.7.5 - Authorization Bypass Allowing Post Meta Updates WordPress 4.7 3.7 – 4.7.4 · 12 branches	`CVE-2017-9065`	5.4 Medium	Ben Bidner	Yes

Showing 1–10 of 13 reports