Eugene Dokukin

Eugene Dokukin is a security researcher credited with 88 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #77 of 3,515 contributors. Their disclosures were published between 2007 and 2015. The most productive year was 2013, with 51 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 50 of their findings (57%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 7.2, peaking at 10.0. Severity breakdown: 19 critical and 21 high.

The most affected software includes WordPress RokBox (7), Chocolate WP (5), RokIntroScroller (5), across 55 distinct plugins, themes and core versions in total.

39 of the 88 disclosed issues have a vendor fix, while 49 remain unpatched. The most severe finding, "Refraction <= 1.3 - Multiple Vulnerabilities", scores 10.0 out of 10.

200720082009201020112012201320142015

Critical

High

Medium

Low

Global Rank

#77

of 3,515 researchers

Vulns

Critical19

High21

Medium48

Low0

Affected Assets

32plugins26themes3core versions

Avg CVSS

7.2

Average score of vulnerabilities

Researcher Submissions

88 records


2015-05-14 00:00	VideoJS (Various Versions) - Cross-Site Scripting S3 Video Plugin < 0.98	`N/A`	6.1 Medium	Eugene Dokukin	Yes
2014-12-23 00:00	Dewplayer <= 1.2 - Cross-Site Scripting Dewplayer <= 1.2	`N/A`	6.1 Medium	Eugene Dokukin	No
2014-09-27 00:00	Refraction <= 1.3 - Multiple Vulnerabilities Refraction <= 1.3	`N/A`	10.0 Critical	Eugene Dokukin	No
2014-09-27 00:00	DZS Video Gallery < 7.95 - Multiple Cross-Site Scripting DZS Video Gallery < 7.95	`CVE-2014-9094`	6.1 Medium	Eugene Dokukin	Yes
2014-08-01 00:00	Contact Form 7 <= 3.5.2 - Arbitrary File Upload Contact Form 7 <= 3.5.2	`N/A`	9.8 Critical	Eugene Dokukin	Yes
2014-03-31 00:00	JS Multi Hotel <= 2.2.1 - Full Path Disclosure JS Multi Hotel <= 2.2.1	`CVE-2014-100009`	5.3 Medium	Eugene Dokukin	No
2014-03-31 00:00	JS Multi Hotel <= 2.2.1 - Cross-Site Scripting JS Multi Hotel <= 2.2.1	`CVE-2014-100008`	6.1 Medium	Eugene Dokukin	No
2014-03-29 00:00	JS Multi Hotel <= 2.2.1 - Reflected Cross-Site Scripting JS Multi Hotel <= 2.2.1	`N/A`	6.1 Medium	Eugene Dokukin	No
2013-12-23 00:00	Dewplayer <= 1.2 and Advanced Dewplayer < 1.5 - Content Spoofing/Injection Dewplayer *	`N/A`	8.6 High	Eugene Dokukin	No
2013-12-19 00:00	Repagent (Unknown Versions) - Cross-Site Scripting repagent *	`N/A`	6.1 Medium	Eugene Dokukin	No

Showing 1–10 of 88 reports