Cat

Cat is a security researcher credited with 43 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #147 of 3,515 contributors. Their disclosures were published between 2022 and 2023. The most productive year was 2023, with 41 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 25 of their findings (58%). Other recurring categories include Missing Authorization, Cross-Site Scripting. The average CVSS score across these disclosures is 5.3, peaking at 8.8. Severity breakdown: 0 critical and 5 high.

The most affected software includes ARMember (3), ALD (2), Cost of Goods (2), across 35 distinct plugins, themes and core versions in total.

32 of the 43 disclosed issues have a vendor fix, while 11 remain unpatched. The most severe finding, "Extra Block Design, Style, CSS for ANY Gutenberg Blocks <= 0.2.6 - Cross-Site Request Forgery", scores 8.8 out of 10.

20222023

Critical

High

Medium

Low

Global Rank

#147

of 3,515 researchers

Vulns

Critical0

High5

Medium38

Low0

Affected Assets

35plugins

Avg CVSS

5.3

Average score of vulnerabilities

Researcher Submissions

43 records


2023-11-03 00:00	Email Templates <= 1.4.2 - Cross-Site Request Forgery via send_test_email Email Templates Customizer… <= 1.4.2	`CVE-2022-47181`	4.3 Medium	Cat	Yes
2023-08-11 00:00	ARMember Premium <= 5.9.2 - Missing Authorization ARMember Premium <= 5.9.2	`CVE-2023-39994`	5.3 Medium	Cat	Yes
2023-08-11 00:00	Portfolio and Projects <= 1.3.7 - Cross-Site Request Forgery via 'wpos_anylc_admin_init_process' Portfolio and Projects <= 1.3.7	`CVE-2023-39995`	4.3 Medium	Cat	Yes
2023-08-11 00:00	Accordion and Accordion Slider <= 1.2.4 - Missing Authorization via 'wp_aas_get_attachment_edit_form' and 'wp_aas_save_attachment_data' Accordion and Accordion Slider <= 1.2.4	`CVE-2023-39996`	6.5 Medium	Cat	Yes
2023-07-26 00:00	APIExperts Square for WooCommerce <= 4.4.1 - Missing Authorization WC Shop Sync <= 4.4.1	`CVE-2022-47182`	5.3 Medium	Cat	Yes
2023-07-17 00:00	Slider a SlidersPack <= 2.0.2 - Missing Authorization via wp_spaios_save_attachment_data Slider a SlidersPack <= 2.0.2	`CVE-2022-46845`	5.3 Medium	Cat	Yes
2023-07-10 00:00	ARMember <= 4.0.5 - Cross-Site Request Forgery ARMember <= 4.0.5	`CVE-2022-47424`	4.3 Medium	Cat	Yes
2023-06-27 00:00	SW Product Bundles <= 2.0.15 - Missing Authorization SW Product Bundles <= 2.0.15	`CVE-2023-36519`	4.3 Medium	Cat	No
2023-06-27 00:00	ARMember <= 4.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting ARMember <= 4.0.4	`CVE-2022-47421`	4.4 Medium	Cat	Yes
2023-06-27 00:00	Post Hit Counter <= 1.3.2 - Missing Authorization Post Hit Counter <= 1.3.2	`CVE-2023-36518`	4.3 Medium	Cat	No

Showing 1–10 of 43 reports