DefenceCode

DefenceCode is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #434 of 3,515 contributors. Their disclosures were published between 2014 and 2018. The most productive year was 2017, with 6 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (40%). Other recurring categories include SQL Injection, PHP Remote File Inclusion. The average CVSS score across these disclosures is 7.5, peaking at 9.9. Severity breakdown: 2 critical and 4 high.

The most affected software includes Tracking Code Manager (2), WP eCommerce (2), Ad Widget for WordPress (1), across 8 distinct plugins, themes and core versions in total.

9 of the 10 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "WordPress Ad Widget <= 2.11.0 - Local File Inclusion", scores 9.9 out of 10.

20142015201620172018

Critical

High

Medium

Low

Global Rank

#434

of 3,515 researchers

Vulns

Critical2

High4

Medium4

Low0

Affected Assets

8plugins

Avg CVSS

7.5

Average score of vulnerabilities

Researcher Submissions

10 records


2018-01-18 00:00	Soundy Audio Playlist <= 4.6 - Cross-Site Scripting Soundy Audio Playlist <= 4.6	`CVE-2018-6001`	6.1 Medium	DefenceCode	No
2018-01-11 00:00	Dbox 3D Slider Lite <= 1.2.2 - SQL Injection Dbox 3D Slider Lite <= 1.2.2	`CVE-2018-5374`	8.8 High	DefenceCode	Yes
2017-12-13 00:00	Top 10 – Popular posts plugin for WordPress <= 2.4.3 - SQL Injection WebberZone Top 10 < 2.4.4	`N/A`	7.4 High	DefenceCode	Yes
2017-08-07 00:00	Easy Modal < 2.1.0 - Authenticated (Admin+) SQL Injection Easy Modal < 2.1.0	`CVE-2017-12946`	7.2 High	DefenceCode	Yes
2017-05-29 00:00	Simple Slideshow Manager <= 2.3 - Reflected Cross-Site Scripting Simple Slideshow Manager <= 2.3	`N/A`	6.1 Medium	DefenceCode	Yes
2017-05-10 00:00	Tracking Code Manager < 1.11.5 - Cross-Site Scripting Tracking Code Manager <= 1.11.4	`N/A`	6.1 Medium	DefenceCode	Yes
2017-05-10 00:00	Tracking Code Manager < 1.11.5 - Denial of Service Tracking Code Manager <= 1.11.4	`N/A`	7.5 High	DefenceCode	Yes
2017-01-01 00:00	WordPress Ad Widget <= 2.11.0 - Local File Inclusion Ad Widget for WordPress < 2.12.0	`N/A`	9.9 Critical	DefenceCode	Yes
2014-08-01 00:00	WP eCommerce <= 3.8.9 - Cross-Site Scripting WP eCommerce <= 3.8.9	`N/A`	6.1 Medium	DefenceCode	Yes
2014-08-01 00:00	WP eCommerce <= 3.8.9 - SQL Injection WP eCommerce <= 3.8.9	`N/A`	9.8 Critical	DefenceCode	Yes

Showing 1–10 of 10 reports