Dhabaleshwar Das

Dhabaleshwar Das is a security researcher credited with 245 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #38 of 3,908 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2024, with 217 findings.

Their research concentrates on Cross-Site Request Forgery, which accounts for 159 of their findings (65%). Other recurring categories include Missing Authorization, Improper Neutralization Of Input During Web Page Generation. The average CVSS score across these disclosures is 4.5, peaking at 6.5.

The most affected software includes Easy Digital Downloads (3), Arconix Shortcodes (2), Barcode Scanner (+Mobile App) (2), across 233 distinct plugins, themes and core versions in total.

221 of the 245 disclosed issues have a vendor fix, while 24 remain unpatched.

20242025

Critical

High

Medium

Low

Global Rank

#38

of 3,908 researchers

Vulns

245

Critical0

High0

Medium244

Low1

Affected Assets

296

205plugins91themes

Avg CVSS

4.5

Average score of vulnerabilities

Researcher Submissions

245 records


2025-04-22 00:00	VikRestaurants Table Reservations and Take-Away <= 1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting VikRestaurants Table Reservations… <= 1.3.3	`CVE-2025-46251`	6.1 Medium	Dhabaleshwar Das	Yes
2025-04-09 00:00	REVE Chat <= 6.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting REVE Chat <= 6.2.2	`CVE-2025-32559`	6.1 Medium	Dhabaleshwar Das	No
2025-04-09 00:00	Chat2 <= 4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting Chat2 <= 4.0	`CVE-2025-32584`	6.1 Medium	Dhabaleshwar Das	Yes
2025-04-09 00:00	WordPress Events Calendar Plugin – connectDaily <= 1.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting connectDaily Events Calendar Plugin <= 1.5.4	`CVE-2025-32597`	6.1 Medium	Dhabaleshwar Das	Yes
2025-04-04 00:00	CRM WordPress Plugin – RepairBuddy <= 3.8213 - Missing Authorization RepairBuddy <= 3.8213	`CVE-2025-32277`	4.3 Medium	Dhabaleshwar Das	Yes
2025-04-01 00:00	Astra Security Suite <= 0.2 - Missing Authorization Astra Security Suite <= 0.2	`CVE-2025-31774`	5.3 Medium	Dhabaleshwar Das	No
2025-03-31 00:00	Appointy Appointment Scheduler <= 4.2.1 - Cross-Site Request Forgery to Settings Change WordPress Appointment Booking… <= 4.2.1	`CVE-2025-31601`	4.3 Medium	Dhabaleshwar Das	No
2025-03-31 00:00	Apimo Connector <= 2.6.3.1 - Cross-Site Request Forgery to Settings Update Apimo Connector <= 2.6.3.1	`CVE-2025-31602`	4.3 Medium	Dhabaleshwar Das	No
2025-03-31 00:00	DesignO <= 2.2.0 - Cross-Site Request Forgery DesignO <= 2.2.0	`CVE-2025-31600`	4.3 Medium	Dhabaleshwar Das	No
2025-03-24 19:32	Estatebud – Properties & Listings <= 5.5.0 - Cross-Site Request Forgery to Settings Update Estatebud <= 5.5.0	`CVE-2024-13710`	4.3 Medium	Dhabaleshwar Das	No

Showing 1–10 of 245 reports