Chris Grello

Chris Grello is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,073 of 3,515 contributors. Their disclosures were published between 2020 and 2022. The most productive year was 2020, with 2 findings.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 1 of their findings (33%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection. The average CVSS score across these disclosures is 7.1, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes Ajax Search Pro (2), ACF Quick Edit Fields (1), across 2 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix. The most severe finding, "Ajax Search Pro <= 4.18.7 - Authenticated (Subscriber+) SQL Injection", scores 8.8 out of 10.

202020212022

Critical

High

Medium

Low

Global Rank

#1073

of 3,515 researchers

Vulns

Critical0

High1

Medium2

Low0

Affected Assets

2plugins

Avg CVSS

7.1

Average score of vulnerabilities

Researcher Submissions

3 records


2022-12-05 00:00	ACF Quick Edit Fields <= 3.2.2 - Authenticated (Contributor+) Insecure Direct Object Reference ACF Quick Edit Fields <= 3.2.2	`CVE-2023-7286`	6.5 Medium	Chris Grello	Yes
2020-08-03 00:00	Ajax Search Pro <= 4.18.7 - Authenticated (Subscriber+) SQL Injection Ajax Search Pro <= 4.18.7	`N/A`	8.8 High	Chris Grello	Yes
2020-08-03 00:00	Ajax Search Pro <= 4.18.7 - Cross-Site Request Forgery to Cross-Site Scripting Ajax Search Pro <= 4.18.7	`N/A`	6.1 Medium	Chris Grello	Yes

Showing 1–3 of 3 reports