easyBug

easyBug is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,168 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 1 of their findings (33%). Other recurring categories include Cross-Site Scripting, SQL Injection. The average CVSS score across these disclosures is 5.8, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes Contact Form to DB by BestWebSoft (1), Stripe Payment Forms by WP Full Pay (1), WhyDonate (1), across 3 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix. The most severe finding, "Contact Form to DB by BestWebSoft <= 1.7.0 - Authenticated (Contributor+) SQL Injection via cntctfrmtdb_department", scores 8.8 out of 10.

2023

Critical

High

Medium

Low

Global Rank

#1168

of 3,515 researchers

Vulns

Critical0

High1

Medium2

Low0

Affected Assets

3plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

3 records


2023-07-05 00:00	WP Full Stripe Free <= 7.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting Stripe Payment Forms by WP Full Pay <= 7.0.5	`CVE-2023-28934`	4.4 Medium	easyBug	Yes
2023-05-10 00:00	Whydonate – FREE Donate button <= 3.12.14 - Cross-Site Request Forgery WhyDonate <= 3.12.14	`CVE-2023-29238`	4.3 Medium	easyBug	Yes
2023-04-17 00:00	Contact Form to DB by BestWebSoft <= 1.7.0 - Authenticated (Contributor+) SQL Injection via cntctfrmtdb_department Contact Form to DB by BestWebSoft <= 1.7.0	`CVE-2023-29096`	8.8 High	easyBug	Yes

Showing 1–3 of 3 reports