Dipak Panchal (th3.d1p4k)

Dipak Panchal (th3.d1p4k) is a security researcher credited with 15 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #336 of 3,515 contributors. Their disclosures were published between 2021 and 2024. The most productive year was 2023, with 9 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 15 of their findings (100%). The average CVSS score across these disclosures is 4.6, peaking at 6.1.

The most affected software includes Adminify (1), All-in-one Sticky Floating Contact Form (1), Bit Form (1), across 15 distinct plugins, themes and core versions in total.

All 15 disclosed issues have since received a vendor fix.

2021202220232024

Critical

High

Medium

Low

Global Rank

#336

of 3,515 researchers

Vulns

Critical0

High0

Medium15

Low0

Affected Assets

15plugins

Avg CVSS

4.6

Average score of vulnerabilities

Researcher Submissions

15 records


2024-07-09 00:00	FormFlow <= 2.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting SimpleForm <= 2.12.1	`CVE-2024-3113`	4.4 Medium	Dipak Panchal (th3.d1p4k)	Yes
2024-04-05 00:00	Call Now Button <= 1.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting Call Now Button <= 1.4.6	`CVE-2024-2908`	4.4 Medium	Dipak Panchal (th3.d1p4k)	Yes
2024-01-22 00:00	Sticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting Sticky Buttons <= 3.2.2	`CVE-2024-0703`	4.4 Medium	Dipak Panchal (th3.d1p4k)	Yes
2023-08-28 00:00	Popup Builder <= 4.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting Popup Builder <= 4.2.1	`CVE-2023-3226`	4.4 Medium	Dipak Panchal (th3.d1p4k)	Yes
2023-08-21 00:00	WP Adminify <= 3.1.5 - Authenticated (Admin+) Stored Cross-Site Scripting Adminify <= 3.1.5	`CVE-2023-4060`	4.4 Medium	Dipak Panchal (th3.d1p4k)	Yes
2023-07-27 00:00	Bit Assist <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting Chat Widget: Floating Customer Support… <= 1.1.8	`CVE-2023-3667`	4.4 Medium	Dipak Panchal (th3.d1p4k)	Yes
2023-07-24 00:00	Contact Form Builder by Bit Form <= 2.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting Bit Form <= 2.1.0	`CVE-2023-3645`	4.4 Medium	Dipak Panchal (th3.d1p4k)	Yes
2023-07-17 00:00	IURNY by INDIGITALL – WhatsApp Chat, Web Push Notifications (FREE) <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting INDIGITALL < 3.2.3	`CVE-2023-3647`	4.4 Medium	Dipak Panchal (th3.d1p4k)	Yes
2023-07-17 00:00	Bubble Menu <= 3.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting Bubble Menu < 3.0.5	`CVE-2023-3650`	4.4 Medium	Dipak Panchal (th3.d1p4k)	Yes
2023-07-03 00:00	All-in-one Floating Contact Form <= 2.1.1 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings All-in-one Sticky Floating Contact Form <= 2.1.1	`CVE-2023-3248`	4.4 Medium	Dipak Panchal (th3.d1p4k)	Yes

Showing 1–10 of 15 reports