Burak Kelebek

Burak Kelebek is a security researcher credited with 13 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #355 of 3,515 contributors. Their disclosures were published between 2016 and 2019. The most productive year was 2016, with 9 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 9 of their findings (69%). Other recurring categories include PHP Remote File Inclusion, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 7.1, peaking at 9.8. Severity breakdown: 2 critical and 3 high.

The most affected software includes Magic Fields (3), FormBuilder (2), Admin Custom Login (1), across 10 distinct plugins, themes and core versions in total.

All 13 disclosed issues have since received a vendor fix. The most severe finding, "Ajax Load More < 2.11.2 - Local File Inclusion", scores 9.8 out of 10.

2016201720182019

Critical

High

Medium

Low

Global Rank

#355

of 3,515 researchers

Vulns

Critical2

High3

Medium8

Low0

Affected Assets

10plugins

Avg CVSS

7.1

Average score of vulnerabilities

Researcher Submissions

13 records


2019-09-10 00:00	Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-field-css parameter Magic Fields <= 1.7.1	`CVE-2017-18611`	6.1 Medium	Burak Kelebek	Yes
2019-09-10 00:00	Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via custom-write-panel-id Parameter Magic Fields <= 1.7.1	`CVE-2017-18609`	6.1 Medium	Burak Kelebek	Yes
2019-09-10 00:00	Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-group-id parameter Magic Fields <= 1.7.1	`CVE-2017-18610`	6.1 Medium	Burak Kelebek	Yes
2017-03-01 00:00	Admin Custom Login <= 2.4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting Admin Custom Login < 2.4.8	`N/A`	8.8 High	Burak Kelebek	Yes
2016-11-08 00:00	WassUp Real Time Analytics < 1.9.1 - Cross-Site Scripting WassUp Real Time Analytics < 1.9.1	`CVE-2016-10919`	6.1 Medium	Burak Kelebek	Yes
2016-08-15 00:00	Link Library <= 5.9.12.29 - Reflected Cross-Site Scripting Link Library < 5.9.12.30	`N/A`	6.1 Medium	Burak Kelebek	Yes
2016-08-15 00:00	Ajax Load More < 2.11.2 - Local File Inclusion Ajax Load More < 2.11.2	`N/A`	9.8 Critical	Burak Kelebek	Yes
2016-08-08 00:00	FormBuilder < 1.08 - Cross-Site Request Forgery FormBuilder <= 1.07	`N/A`	6.3 Medium	Burak Kelebek	Yes
2016-07-24 00:00	Contact Form Email < 1.1.48 - Reflected Cross-Site Scripting Contact Form Email < 1.1.48	`N/A`	7.1 High	Burak Kelebek	Yes
2016-07-24 00:00	Code Snippets < 2.7.0 - Reflected Cross-Site Scripting Code Snippets < 2.7.0	`N/A`	6.1 Medium	Burak Kelebek	Yes

Showing 1–10 of 13 reports