Dylan Irzi

Dylan Irzi is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #764 of 3,515 contributors. Their disclosures were published between 2013 and 2014. The most productive year was 2014, with 4 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (60%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.5, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes WhyDoWork AdSense (2), Booking Calendar (1), Wordfence Security (1), across 4 distinct plugins, themes and core versions in total.

3 of the 5 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "WhyDoWork AdSense <= 1.2 - Cross-Site Request Forgery", scores 8.8 out of 10.

20132014

Critical

High

Medium

Low

Global Rank

#764

of 3,515 researchers

Vulns

Critical0

High2

Medium3

Low0

Affected Assets

4plugins

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

5 records


2014-08-01 00:00	Wordfence Security <= 3.8.1 - Stored Cross-Site Scripting Wordfence Security <= 3.8.1	`N/A`	7.2 High	Dylan Irzi	Yes
2014-08-01 00:00	Booking Calendar < 4.1.6 - Cross-Site Request Forgery Booking Calendar < 4.1.6	`N/A`	4.3 Medium	Dylan Irzi	Yes
2014-07-29 00:00	WhyDoWork AdSense <= 1.2 - Reflected Cross-Site Scripting WhyDoWork AdSense <= 1.2	`CVE-2014-9100`	6.1 Medium	Dylan Irzi	No
2014-07-29 00:00	WhyDoWork AdSense <= 1.2 - Cross-Site Request Forgery WhyDoWork AdSense <= 1.2	`CVE-2014-9099`	8.8 High	Dylan Irzi	No
2013-08-26 00:00	Simple Login Registration <= 1.0.2 - Cross-Site Scripting wp-simple-login-registration-plugin <= 1.0.2	`N/A`	6.1 Medium	Dylan Irzi	Yes

Showing 1–5 of 5 reports