David Herrera

David Herrera is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,676 of 3,515 contributors. Their disclosures were published between 2016 and 2017.

Their research concentrates on Improper Authorization, which accounts for 2 of their findings (100%). The average CVSS score across these disclosures is 4.8, peaking at 5.4.

The most affected software includes WordPress 4.5 (1), WordPress 4.7 (1), across 2 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix.

20162017

Critical

High

Medium

Low

Global Rank

#1676

of 3,515 researchers

Vulns

Critical0

High0

Medium2

Low0

Affected Assets

2core versions

Avg CVSS

4.8

Average score of vulnerabilities

Researcher Submissions

2 records


2017-01-26 00:00	WordPress Core < 4.7.2 - Authorization Bypass to Term Disclosure WordPress 4.7 3.7 – 4.7.1 · 12 branches	`CVE-2017-5610`	4.3 Medium	David Herrera	Yes
2016-06-18 00:00	WordPress Core < 4.5.3 - Authorization Bypass to Remove Category Attribute WordPress 4.5 3.7 – 4.5.2 · 10 branches	`CVE-2016-5837`	5.4 Medium	David Herrera	Yes

Showing 1–2 of 2 reports