DevilScreaM

DevilScreaM is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #472 of 3,515 contributors. The disclosure was published in 2013.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 4 of their findings (44%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Cross-Site Scripting. The average CVSS score across these disclosures is 8.9, peaking at 9.8. Severity breakdown: 4 critical and 4 high.

The most affected software includes MoneyTheme (2), Amplus (1), Daily Deal by Templatic (1), across 8 distinct plugins, themes and core versions in total.

1 of the 9 disclosed issues have a vendor fix, while 8 remain unpatched. The most severe finding, "wp-checkout (Unknown Versions) - Arbitrary File Upload", scores 9.8 out of 10.

2013

Critical

High

Medium

Low

Global Rank

#472

of 3,515 researchers

Vulns

Critical4

High4

Medium1

Low0

Affected Assets

1plugin8themes

Avg CVSS

8.9

Average score of vulnerabilities

Researcher Submissions

9 records


2013-11-17 00:00	Euclid <= All Versions - Cross-Site Request Forgery Euclid - Tech Corporate Multilingual… *	`N/A`	8.8 High	DevilScreaM	No
2013-11-17 00:00	Dimension (Unknown Versions) - Cross-Site Request Forgery to Arbitrary File Upload Dimension *	`N/A`	8.8 High	DevilScreaM	No
2013-11-17 00:00	Make A Statement (All Versions) - Arbitrary File Upload Make A Statement *	`N/A`	8.8 High	DevilScreaM	No
2013-11-17 00:00	Amplus (Unspecified Version) - Cross-Site Request Forgery Amplus *	`N/A`	8.8 High	DevilScreaM	No
2013-10-31 00:00	wp-checkout (Unknown Versions) - Arbitrary File Upload WordPress Checkout *	`N/A`	9.8 Critical	DevilScreaM	No
2013-10-29 00:00	MoneyTheme (All Versions) - Arbitrary File Upload MoneyTheme *	`N/A`	9.8 Critical	DevilScreaM	No
2013-10-28 00:00	MoneyTheme (All Versions) - Cross-Site Scripting MoneyTheme *	`N/A`	6.1 Medium	DevilScreaM	No
2013-10-24 00:00	GeoPlaces <= 4 - Arbitrary File Upload Geo Places 4 Theme beta <= 4beta	`N/A`	9.8 Critical	DevilScreaM	Yes
2013-10-23 00:00	Daily Deal (Unknown Versions) - Arbitrary File Upload Daily Deal by Templatic <= 2.2.4	`N/A`	9.8 Critical	DevilScreaM	No

Showing 1–9 of 9 reports