Etan Imanol Castro Aldrete

Etan Imanol Castro Aldrete is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #524 of 3,515 contributors. Their disclosures were published between 2022 and 2024. The most productive year was 2023, with 5 findings.

Their research concentrates on SQL Injection, which accounts for 4 of their findings (50%). Other recurring categories include Cross-Site Scripting, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.7, peaking at 8.8. Severity breakdown: 0 critical and 4 high.

The most affected software includes Short URL (2), Elementor ImageBox (1), Log HTTP Requests (1), across 7 distinct plugins, themes and core versions in total.

6 of the 8 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "Ultimate Addons for Contact Form 7 <= 3.1.23 - Authenticated(Subscriber+) SQL Injection", scores 8.8 out of 10.

202220232024

Critical

High

Medium

Low

Global Rank

#524

of 3,515 researchers

Vulns

Critical0

High4

Medium4

Low0

Affected Assets

7plugins

Avg CVSS

6.7

Average score of vulnerabilities

Researcher Submissions

8 records


2024-08-16 00:00	Short URL <= 1.6.8 - Cross-Site Request Forgery via configuration_page Short URL <= 1.6.8	`CVE-2023-1604`	4.7 Medium	Etan Imanol Castro Aldrete	No
2024-04-29 00:00	Elementor ImageBox <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Elementor ImageBox <= 1.2.8	`CVE-2024-3074`	6.4 Medium	Etan Imanol Castro Aldrete	Yes
2023-06-28 00:00	Short URL <= 1.6.4 - Authenticated(Admin+) Stored Cross-Site Scripting Short URL 1.6.4	`CVE-2023-1602`	4.4 Medium	Etan Imanol Castro Aldrete	Yes
2023-06-08 00:00	Ultimate Addons for Contact Form 7 <= 3.1.23 - Authenticated(Subscriber+) SQL Injection Ultra Addons for Contact Form 7 3.1.23	`CVE-2023-1615`	8.8 High	Etan Imanol Castro Aldrete	Yes
2023-03-17 00:00	WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection WP Popup Banners <= 1.2.5	`CVE-2023-1471`	8.8 High	Etan Imanol Castro Aldrete	No
2023-02-17 00:00	WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection WP Coder <= 2.5.3	`CVE-2023-0895`	7.2 High	Etan Imanol Castro Aldrete	Yes
2023-01-12 00:00	Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection Simple Membership WP user Import <= 1.7	`CVE-2023-0254`	7.2 High	Etan Imanol Castro Aldrete	Yes
2022-10-05 00:00	Log HTTP Requests <= 1.3.1 - Stored Cross-Site Scripting Log HTTP Requests <= 1.3.1	`CVE-2022-3402`	6.1 Medium	Etan Imanol Castro Aldrete	Yes

Showing 1–8 of 8 reports