Ehsan Hosseini

Ehsan Hosseini is a security researcher credited with 6 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #659 of 3,515 contributors. The disclosure was published in 2015.

Their research concentrates on Cross-Site Scripting, which accounts for 5 of their findings (83%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.6, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes Vertical Image Slider (2), eShop (1), Googmonify (1), across 5 distinct plugins, themes and core versions in total.

4 of the 6 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "wordpress vertical image slider plugin < 1.2 - Cross-Site Request Forgery", scores 8.8 out of 10.

2015

Critical

High

Medium

Low

Global Rank

#659

of 3,515 researchers

Vulns

Critical0

High1

Medium5

Low0

Affected Assets

5plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

6 records


2015-09-19 00:00	wordpress vertical image slider plugin < 1.2 - Cross-Site Scripting Vertical Image Slider < 1.2	`N/A`	6.1 Medium	Ehsan Hosseini	Yes
2015-09-09 00:00	eshop <= 6.3.13 - Cross-Site Forgery Request and Reflected Cross-Site Scripting eShop <= 6.3.13	`CVE-2015-9413`	6.5 Medium	Ehsan Hosseini	Yes
2015-09-06 00:00	WP Symposium <= 15.8.1 - Reflected Cross-Site Scripting WP Symposium <= 15.8.1	`CVE-2015-9414`	6.1 Medium	Ehsan Hosseini	Yes
2015-08-29 00:00	sourceAFRICA <= 0.1.3 - Cross-Site Scripting sourceAFRICA <= 0.1.3	`CVE-2015-6920`	6.1 Medium	Ehsan Hosseini	No
2015-08-23 00:00	Googmonify <= 0.5.1 - Cross-Site Request Forgery to Cross-Site Scripting Googmonify <= 0.5.1	`CVE-2015-9427`	6.1 Medium	Ehsan Hosseini	No
2015-08-02 00:00	wordpress vertical image slider plugin < 1.2 - Cross-Site Request Forgery Vertical Image Slider < 1.2	`N/A`	8.8 High	Ehsan Hosseini	Yes

Showing 1–6 of 6 reports