Daniel Krohmer

Daniel Krohmer is a security researcher credited with 51 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #115 of 3,515 contributors. Their disclosures were published between 2022 and 2023. The most productive year was 2022, with 46 findings.

Their research concentrates on SQL Injection, which accounts for 49 of their findings (96%). Other recurring categories include Cross-Site Scripting. The average CVSS score across these disclosures is 7.5, peaking at 9.8. Severity breakdown: 4 critical and 43 high.

The most affected software includes Contest Gallery (16), LetsRecover (3), Note Press (3), across 25 distinct plugins, themes and core versions in total.

32 of the 51 disclosed issues have a vendor fix, while 19 remain unpatched. The most severe finding, "10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters", scores 9.8 out of 10.

20222023

Critical

High

Medium

Low

Global Rank

#115

of 3,515 researchers

Vulns

Critical4

High43

Medium4

Low0

Affected Assets

25plugins

Avg CVSS

7.5

Average score of vulnerabilities

Researcher Submissions

51 records


2023-03-27 00:00	WC Fields Factory <= 4.1.5 - Authenticated (Administrator+) SQL Injection WC Fields Factory <= 4.1.5	`CVE-2023-0277`	7.2 High	Kunal Sharma	Yes
2023-02-20 00:00	10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters 10Web Map Builder for Google Maps <= 1.0.72	`CVE-2023-0037`	9.8 Critical	Kunal Sharma	Yes
2023-02-16 00:00	Media Library Assistant <= 3.05 - Authenticated (Administrator+) SQL Injection Media Library Assistant <= 3.05	`CVE-2023-0279`	7.2 High	Kunal Sharma	Yes
2023-01-31 00:00	GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection GeoDirectory <= 2.2.23	`CVE-2023-0278`	7.2 High	Kunal Sharma	Yes
2023-01-19 00:00	Mapwiz <= 1.0.1 - Authenticated (Admin+) SQL Injection Mapwiz <= 1.0.1	`CVE-2022-4546`	7.2 High	Kunal Sharma	No
2022-12-24 00:00	Conditional Payment Methods for WooCommerce <= 1.0 - Authenticated (Admin+) SQL Injection Conditional Payment Methods… <= 1.0	`CVE-2022-4547`	7.2 High	Kunal Sharma	No
2022-12-12 00:00	Web Invoice <= 2.1.3 - Authenticated SQL Injection Web Invoice <= 2.1.3	`CVE-2022-4371`	8.8 High	Kunal Sharma	No
2022-12-12 00:00	Web Invoice <= 2.1.3 - Authenticated SQL Injection Web Invoice <= 2.1.3	`CVE-2022-4372`	8.8 High	Kunal Sharma	No
2022-12-12 00:00	Quote-O-Matic <= 1.0.5 - Authenticated (Administrator+) SQL Injection Quote-O-Matic <= 1.0.5	`CVE-2022-4373`	7.2 High	Kunal Sharma	No
2022-12-12 00:00	multimedial images <= 1.0b - Authenticated (Administrator+) SQL Injection multimedial images <= 1.0b	`CVE-2022-4370`	7.2 High	Kunal Sharma	No

Showing 1–10 of 51 reports