David Vaartjes

David Vaartjes is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #717 of 3,515 contributors. Their disclosures were published between 2016 and 2017. The most productive year was 2017, with 3 findings.

Their research concentrates on Code Injection, which accounts for 1 of their findings (20%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting. The average CVSS score across these disclosures is 8.5, peaking at 9.8. Severity breakdown: 1 critical and 4 high.

The most affected software includes adminer (1), All in One SEO (1), File Manager (1), across 5 distinct plugins, themes and core versions in total.

4 of the 5 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Adminer <= 1.4.5 - Security Bypass to Database Login", scores 9.8 out of 10.

20162017

Critical

High

Medium

Low

Global Rank

#717

of 3,515 researchers

Vulns

Critical1

High4

Medium0

Low0

Affected Assets

5plugins

Avg CVSS

8.5

Average score of vulnerabilities

Researcher Submissions

5 records


2017-03-03 00:00	Adminer <= 1.4.5 - Security Bypass to Database Login adminer <= 1.4.5	`CVE-2017-20066`	9.8 Critical	David Vaartjes	No
2017-03-01 00:00	Bit File Manager <= 4.1.4 - Cross-Site Request Forgery to Arbitrary File Upload File Manager < 4.1.5	`N/A`	8.8 High	David Vaartjes	Yes
2017-03-01 00:00	VaultPress <= 1.8.6 - Remote Code Execution Jetpack VaultPress <= 1.8.6	`N/A`	8.1 High	David Vaartjes	Yes
2016-07-19 00:00	SpiderVPlayer < 1.5.18 - Multiple Blind Authenticated SQL Injections SpiderVPlayer < 1.5.18	`N/A`	8.8 High	David Vaartjes	Yes
2016-07-01 00:00	All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 2.3.6 - Stored Cross-Site Scripting All in One SEO < 2.3.7	`N/A`	7.2 High	David Vaartjes	Yes

Showing 1–5 of 5 reports