Benjamin Lim

Benjamin Lim is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #730 of 3,515 contributors. Their disclosures were published between 2017 and 2019. The most productive year was 2018, with 2 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (40%). Other recurring categories include Authentication Bypass Using An Alternate Path Or Channel, Missing Authorization. The average CVSS score across these disclosures is 7.6, peaking at 9.8. Severity breakdown: 2 critical and 1 high.

The most affected software includes Smart Google Code Inserter (2), Participants Database (1), Student Result or Employee Database (1), across 4 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix. The most severe finding, "Smart Google Code Inserter < 3.5 - Unauthenticated SQL Injection", scores 9.8 out of 10.

201720182019

Critical

High

Medium

Low

Global Rank

#730

of 3,515 researchers

Vulns

Critical2

High1

Medium2

Low0

Affected Assets

4plugins

Avg CVSS

7.6

Average score of vulnerabilities

Researcher Submissions

5 records


2019-07-05 00:00	WP Like Button <= 1.6.0 - Missing Authorization WP Like Button < 1.6.1	`CVE-2019-13344`	5.3 Medium	Benjamin Lim	Yes
2018-01-01 00:00	Smart Google Code Inserter < 3.5 - Stored Cross-Site Scripting Smart Google Code Inserter < 3.5	`CVE-2018-3810`	7.2 High	Benjamin Lim	Yes
2018-01-01 00:00	Smart Google Code Inserter < 3.5 - Unauthenticated SQL Injection Smart Google Code Inserter < 3.5	`CVE-2018-3811`	9.8 Critical	Benjamin Lim	Yes
2017-09-21 00:00	Student Result or Employee Database <= 1.6.3 - Authentication Bypass Student Result or Employee Database <= 1.6.3	`CVE-2017-14766`	9.8 Critical	Benjamin Lim	Yes
2017-09-06 00:00	Participants Database <= 1.7.5.9 - Unauthorized Cross-Site Scripting Participants Database <= 1.7.5.9	`CVE-2017-14126`	6.1 Medium	Benjamin Lim	Yes

Showing 1–5 of 5 reports