Dhabaleshwar Das

Dhabaleshwar Das is a security researcher credited with 245 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #37 of 3,515 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2024, with 217 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 159 of their findings (65%). Other recurring categories include Missing Authorization, Cross-Site Scripting. The average CVSS score across these disclosures is 4.5, peaking at 6.5.

The most affected software includes Easy Digital Downloads (3), Arconix Shortcodes (2), Barcode Scanner (+Mobile App) (2), across 233 distinct plugins, themes and core versions in total.

221 of the 245 disclosed issues have a vendor fix, while 24 remain unpatched.

20242025

Critical

High

Medium

Low

Global Rank

#37

of 3,515 researchers

Vulns

245

Critical0

High0

Medium244

Low1

Affected Assets

296

205plugins91themes

Avg CVSS

4.5

Average score of vulnerabilities

Researcher Submissions

245 records


2025-04-22 00:00	VikRestaurants Table Reservations and Take-Away <= 1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting VikRestaurants Table Reservations… <= 1.3.3	`CVE-2025-46251`	6.1 Medium	Dhabaleshwar Das	Yes
2025-04-09 00:00	REVE Chat <= 6.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting REVE Chat <= 6.2.2	`CVE-2025-32559`	6.1 Medium	Dhabaleshwar Das	No
2025-04-09 00:00	Chat2 <= 4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting Chat2 <= 4.0	`CVE-2025-32584`	6.1 Medium	Dhabaleshwar Das	Yes
2025-04-09 00:00	WordPress Events Calendar Plugin – connectDaily <= 1.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting connectDaily Events Calendar Plugin <= 1.5.4	`CVE-2025-32597`	6.1 Medium	Dhabaleshwar Das	Yes
2025-04-04 00:00	CRM WordPress Plugin – RepairBuddy <= 3.8213 - Missing Authorization RepairBuddy <= 3.8213	`CVE-2025-32277`	4.3 Medium	Dhabaleshwar Das	Yes
2025-04-01 00:00	Astra Security Suite <= 0.2 - Missing Authorization Astra Security Suite <= 0.2	`CVE-2025-31774`	5.3 Medium	Dhabaleshwar Das	No
2025-03-31 00:00	Appointy Appointment Scheduler <= 4.2.1 - Cross-Site Request Forgery to Settings Change WordPress Appointment Booking… <= 4.2.1	`CVE-2025-31601`	4.3 Medium	Dhabaleshwar Das	No
2025-03-31 00:00	Apimo Connector <= 2.6.3.1 - Cross-Site Request Forgery to Settings Update Apimo Connector <= 2.6.3.1	`CVE-2025-31602`	4.3 Medium	Dhabaleshwar Das	No
2025-03-31 00:00	DesignO <= 2.2.0 - Cross-Site Request Forgery DesignO <= 2.2.0	`CVE-2025-31600`	4.3 Medium	Dhabaleshwar Das	No
2025-03-24 19:32	Estatebud – Properties & Listings <= 5.5.0 - Cross-Site Request Forgery to Settings Update Estatebud <= 5.5.0	`CVE-2024-13710`	4.3 Medium	Dhabaleshwar Das	No

Showing 1–10 of 245 reports