Christian Mehlmauer

Christian Mehlmauer is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #997 of 3,515 contributors. Their disclosures were published between 2013 and 2014. The most productive year was 2013, with 2 findings.

Their research concentrates on Code Injection, which accounts for 1 of their findings (33%). Other recurring categories include Cross-Site Scripting, SQL Injection. The average CVSS score across these disclosures is 9.0, peaking at 10.0. Severity breakdown: 2 critical and 1 high.

The most affected software includes Timely All-in-One Events Calendar (2), W3 Total Cache (1), across 2 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix. The most severe finding, "All-in-One Events Calendar < 1.10 - SQL Injection", scores 10.0 out of 10.

20132014

Critical

High

Medium

Low

Global Rank

#997

of 3,515 researchers

Vulns

Critical2

High1

Medium0

Low0

Affected Assets

2plugins

Avg CVSS

9.0

Average score of vulnerabilities

Researcher Submissions

3 records


2014-08-01 00:00	W3 Total Cache <= 0.9.2.8 - Remote Code Execution W3 Total Cache <= 0.9.2.8	`CVE-2013-2010`	9.8 Critical	Christian Mehlmauer	Yes
2013-11-14 00:00	Timely All-in-One Events Calendar < 1.10 - Cross-Site Scripting Timely All-in-One Events Calendar < 1.10	`N/A`	7.1 High	Christian Mehlmauer	Yes
2013-03-07 00:00	All-in-One Events Calendar < 1.10 - SQL Injection Timely All-in-One Events Calendar < 1.10	`N/A`	10.0 Critical	Christian Mehlmauer	Yes

Showing 1–3 of 3 reports