Chris Liu

Chris Liu is a security researcher credited with 13 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #363 of 3,515 contributors. Their disclosures were published between 2016 and 2018. The most productive year was 2017, with 9 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 12 of their findings (92%). Other recurring categories include Path Traversal. The average CVSS score across these disclosures is 6.0, peaking at 6.4.

The most affected software includes 3CX Free Live Chat, Calls & Messaging (1), Event Calendar WD version (1), FV Flowplayer Video Player (1), across 13 distinct plugins, themes and core versions in total.

All 13 disclosed issues have since received a vendor fix.

201620172018

Critical

High

Medium

Low

Global Rank

#363

of 3,515 researchers

Vulns

Critical0

High0

Medium13

Low0

Affected Assets

13plugins

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

13 records


2018-07-02 00:00	FV Flowplayer Video Player 6.1.2 - 6.6.4 - Cross-Site Scripting FV Flowplayer Video Player 6.1.2 – 6.6.4	`CVE-2018-0642`	6.1 Medium	Chris Liu	Yes
2018-04-27 00:00	Open Graph and Twitter Card Tags < 2.2.4.1 - Reflected Cross-Site Scripting Social Preview and Open Graph Tags < 2.2.4.1	`CVE-2018-0579`	6.1 Medium	Chris Liu	Yes
2018-04-27 00:00	PixelYourSite <= 5.2.1 - Reflected Cross-Site Scripting PixelYourSite < 5.3.0	`CVE-2018-0578`	5.4 Medium	Chris Liu	Yes
2017-11-27 00:00	WP Retina 2x <= 5.2.0 - Cross-Site Scripting Perfect Images <= 5.2.0	`CVE-2018-0511`	6.1 Medium	Chris Liu	Yes
2017-08-24 00:00	BackupGuard <= 1.1.46 - Reflected Cross-Site Scripting JetBackup <= 1.1.46	`CVE-2017-10837`	6.1 Medium	Chris Liu	Yes
2017-07-24 00:00	Simple Custom CSS and JS <= 3.3 - Cross-Site Scripting Simple Custom CSS and JS <= 3.3	`CVE-2017-2285`	6.1 Medium	Chris Liu	Yes
2017-07-24 00:00	Popup Maker < 1.6.5 - Reflected Cross-Site Scripting Popup Maker < 1.6.5	`CVE-2017-2284`	6.1 Medium	Chris Liu	Yes
2017-06-23 00:00	WordPress Shortcodes Plugin — Shortcodes Ultimate < 4.10.0 - Directory Traversal Shortcodes Ultimate < 4.10.0	`CVE-2017-2245`	5.0 Medium	Chris Liu	Yes
2017-06-20 00:00	EventCalendar < 1.0.94 - Authenticated Cross-Site Scripting Event Calendar WD version < 1.0.94	`CVE-2017-2224`	6.4 Medium	Chris Liu	Yes
2017-06-13 00:00	WP-Members < 3.1.8 - Cross-Site Scripting WP-Members Membership Plugin < 3.1.8	`CVE-2017-2222`	6.1 Medium	Chris Liu	Yes

Showing 1–10 of 13 reports