Cronus

Cronus is a security researcher credited with 29 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #193 of 3,515 contributors. The disclosure was published in 2024.

Their research concentrates on Cross-Site Scripting, which accounts for 26 of their findings (90%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 4.6, peaking at 6.4.

The most affected software includes Backend Designer (1), Brozzme Scroll Top (1), Buttonizer (1), across 29 distinct plugins, themes and core versions in total.

14 of the 29 disclosed issues have a vendor fix, while 15 remain unpatched.

2024

Critical

High

Medium

Low

Global Rank

#193

of 3,515 researchers

Vulns

Critical0

High0

Medium28

Low1

Affected Assets

29plugins

Avg CVSS

4.6

Average score of vulnerabilities

Researcher Submissions

29 records


2024-08-16 00:00	Button contact VR <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting Buttonizer <= 4.7.7	`CVE-2024-43347`	4.4 Medium	Cronus	Yes
2024-07-11 00:00	Contact Form 7 Summary and Print <= 1.2.5 - Cross-Site Request Forgery Contact Form 7 Submission Summary… <= 1.2.5	`CVE-2024-38724`	6.1 Medium	Cronus	Yes
2024-07-11 00:00	Change From Email <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Change From Email <= 1.2.1	`CVE-2024-38738`	4.4 Medium	Cronus	No
2024-07-10 00:00	Simple Popup <= 4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting Simple Popup Plugin <= 4.4	`CVE-2024-38689`	4.4 Medium	Cronus	Yes
2024-07-06 00:00	WPFavicon <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting WPFavicon <= 2.1.1	`CVE-2024-37558`	3.1 Low	Cronus	No
2024-07-06 00:00	Save as PDF plugin by Pdfcrowd <= 4.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Save as PDF Plugin by PDFCrowd <= 4.0.0	`CVE-2024-37549`	4.4 Medium	Cronus	Yes
2024-07-05 00:00	Login Logo Editor <= 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Login Logo Editor <= 1.3.3	`CVE-2024-37523`	4.4 Medium	Cronus	No
2024-07-05 00:00	Easy Custom Code (LESS/CSS/JS) – Live editing <= 1.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting Easy Custom Code (LESS/CSS/JS) <= 1.0.8	`CVE-2024-37536`	4.4 Medium	Cronus	Yes
2024-06-07 00:00	Tooltip CK <= 2.2.15 - Authenticated (Admin+) Stored Cross-Site Scripting Tooltip CK <= 2.2.15	`CVE-2024-35756`	4.4 Medium	Cronus	No
2024-06-06 00:00	Stellissimo Text Box <= 1.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting Stellissimo Text Box <= 1.1.4	`CVE-2024-35752`	4.4 Medium	Cronus	No

Showing 1–10 of 29 reports