Chevon Phillip

Chevon Phillip is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #768 of 3,515 contributors. The disclosure was published in 2020.

Their research concentrates on Cross-Site Scripting, which accounts for 5 of their findings (100%). The average CVSS score across these disclosures is 6.4, peaking at 8.3. Severity breakdown: 0 critical and 1 high.

The most affected software includes 3CX Free Live Chat, Calls & Messaging (1), ImageBoss (1), Internal Links Manager (1), across 5 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix. The most severe finding, "Newsletter <= 6.7.6 - Stored Cross-Site Scripting", scores 8.3 out of 10.

2020

Critical

High

Medium

Low

Global Rank

#768

of 3,515 researchers

Vulns

Critical0

High1

Medium4

Low0

Affected Assets

5plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

5 records


2020-08-18 00:00	Internal Links Manager <= 2.1.0 - Multiple Stored Cross-Site Scripting Internal Links Manager <= 2.1.0	`N/A`	6.4 Medium	Chevon Phillip	Yes
2020-07-13 00:00	SendPress Newsletters < 1.20.7.13 - Authenticated Stored Cross-Site Scripting SendPress Newsletters < 1.20.7.13	`N/A`	6.4 Medium	Chevon Phillip	Yes
2020-07-12 00:00	Newsletter <= 6.7.6 - Stored Cross-Site Scripting Newsletter <= 6.7.6	`N/A`	8.3 High	Chevon Phillip	Yes
2020-07-12 00:00	WP Live Chat Support <= 8.1.9 - Stored Cross-Site Scripting 3CX Free Live Chat, Calls & Messaging <= 8.1.9	`N/A`	5.4 Medium	Chevon Phillip	Yes
2020-05-11 00:00	ImageBoss – Images Up To 60% Smaller & CDN < 3.0.6 - Cross-Site Scripting ImageBoss < 3.0.6	`CVE-2021-24888`	5.5 Medium	Chevon Phillip	Yes

Showing 1–5 of 5 reports