Dateoljo of BoB 12th

Dateoljo of BoB 12th is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #841 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2024, with 2 findings.

Their research concentrates on Unrestricted Upload Of File With Dangerous Type, which accounts for 4 of their findings (100%). The average CVSS score across these disclosures is 7.7, peaking at 9.1. Severity breakdown: 1 critical and 3 high.

The most affected software includes Order Export & Order Import… (1), Product Import Export for WooCommerce (1), Theme Editor (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix. The most severe finding, "WP Child Theme Generator <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload", scores 9.1 out of 10.

20232024

Critical

High

Medium

Low

Global Rank

#841

of 3,515 researchers

Vulns

Critical1

High3

Medium0

Low0

Affected Assets

4plugins

Avg CVSS

7.7

Average score of vulnerabilities

Researcher Submissions

4 records


2024-01-16 00:00	Product Import Export for WooCommerce <= 2.3.7 - Authenticated(Shop Manager+) Arbitrary File Upload via upload_import_file Product Import Export for WooCommerce <= 2.3.7	`CVE-2024-22152`	7.2 High	Dateoljo of BoB 12th	Yes
2024-01-10 00:00	Order Export & Order Import for WooCommerce <= 2.4.3 - Authenticated (Shop Manager+) Arbitrary File Upload via upload_import_file Order Export & Order Import… <= 2.4.3	`CVE-2024-22135`	7.2 High	Dateoljo of BoB 12th	Yes
2023-11-20 00:00	WP Child Theme Generator <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload WP Child Theme Generator <= 1.1.2	`CVE-2023-47873`	9.1 Critical	Dateoljo of BoB 12th	Yes
2023-11-20 00:00	Theme Editor <= 2.7.1 - Authenticated (Administrator+) Arbitrary File Upload Theme Editor <= 2.7.1	`CVE-2023-6091`	7.2 High	Dateoljo of BoB 12th	Yes

Showing 1–4 of 4 reports