dwxsupport

dwxsupport is a security researcher credited with 23 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #228 of 3,515 contributors. Their disclosures were published between 2013 and 2018. The most productive year was 2014, with 6 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 10 of their findings (43%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 7.0, peaking at 8.8. Severity breakdown: 0 critical and 10 high.

The most affected software includes BP Group Documents (4), iframe (2), BuddyPress Activity Plus (1), across 19 distinct plugins, themes and core versions in total.

21 of the 23 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "WP User Groups <= 2.1.0 - Cross-Site Request Forgery", scores 8.8 out of 10.

201320142015201620172018

Critical

High

Medium

Low

Global Rank

#228

of 3,515 researchers

Vulns

Critical0

High10

Medium13

Low0

Affected Assets

19plugins

Avg CVSS

7.0

Average score of vulnerabilities

Researcher Submissions

23 records


2018-06-20 00:00	Tooltipy < 5.1 - Cross-Site Request Forgery Tooltipy (tooltips for WP) < 5.1	`CVE-2018-1000505`	6.5 Medium	dwxsupport	Yes
2018-05-11 00:00	WP User Groups <= 2.1.0 - Cross-Site Request Forgery WP User Groups <= 2.1.0	`N/A`	8.8 High	Mallory Adams	Yes
2018-04-10 00:00	Relevanssi <= 3.6.0 - Authenticated (Admin+) SQL Injection Relevanssi < 3.6.1	`N/A`	8.7 High	dwxsupport	Yes
2017-09-26 00:00	Content Audit <= 1.9.1 - Cross-Site Request Forgery to Cross-Site Scripting Content Audit <= 1.9.1	`CVE-2017-18560`	6.1 Medium	Mallory Adams	Yes
2017-01-04 00:00	Stop User Enumeration <= 1.3.8 - Unauthenticated Username Enumeration Stop User Enumeration <= 1.3.8	`CVE-2017-1000226`	5.3 Medium	Glyn Wintle	Yes
2016-12-23 00:00	Image Slider < 1.1.90 - Arbitrary File Deletion Image Slider < 1.1.90	`N/A`	8.1 High	dwxsupport	Yes
2016-12-21 00:00	copy-me <= 1.0.0 - Missing Authorization & Cross-Site Request Forgery copy-me <= 1.0.0	`CVE-2016-10938`	5.4 Medium	Mallory Adams	No
2016-12-15 00:00	Quiz And Survey Master <= 4.7.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting Quiz and Survey Master (QSM) < 4.7.9	`CVE-2016-11085`	8.8 High	Mallory Adams	Yes
2015-08-26 00:00	Private Only <= 3.5.1 - Multiple Cross-Site Request Forgery Private Only <= 3.5.1	`CVE-2015-5483`	8.8 High	Mallory Adams	No
2015-08-11 00:00	iFrame <= 3.0 - Reflected Cross-Site Scripting iframe <= 3.0	`CVE-2015-6738`	6.1 Medium	Mallory Adams	Yes

Showing 1–10 of 23 reports