Everett Griffiths

Everett Griffiths is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #734 of 3,515 contributors. The disclosure was published in 2014.

Their research concentrates on Missing Authorization, which accounts for 2 of their findings (40%). Other recurring categories include Code Injection, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 7.4, peaking at 8.8. Severity breakdown: 0 critical and 4 high.

The most affected software includes iMember360is (5), across 1 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix. The most severe finding, "iMember360 3.8.0.12 - 3.9.001 - Cross-Site Request Forgery", scores 8.8 out of 10.

2014

Critical

High

Medium

Low

Global Rank

#734

of 3,515 researchers

Vulns

Critical0

High4

Medium1

Low0

Affected Assets

1plugin

Avg CVSS

7.4

Average score of vulnerabilities

Researcher Submissions

5 records


2014-05-14 00:00	iMember360is 3.8.012 - 3.9.001 - Cross-Site Scripting iMember360is 3.8.012 – < 3.9.002	`CVE-2014-3842`	6.1 Medium	Everett Griffiths	Yes
2014-04-28 00:00	iMember360 3.8.012 - 3.9.001 - Missing Authorization iMember360is 3.8.012 – < 3.9.001	`CVE-2014-3849`	7.5 High	Everett Griffiths	Yes
2014-04-28 00:00	iMember360 < 3.9.001 - Missing Authorization and Sensitive Data Exposure iMember360is < 3.9.001	`CVE-2014-3848`	7.5 High	Everett Griffiths	Yes
2014-04-24 00:00	iMember360 3.8.012 - 3.9.001 - Remote Code Execution iMember360is 3.8.012 – 3.9.001	`CVE-2014-8949`	7.2 High	Everett Griffiths	Yes
2014-04-24 00:00	iMember360 3.8.0.12 - 3.9.001 - Cross-Site Request Forgery iMember360is 3.8.012 – < 3.9.001	`CVE-2014-8948`	8.8 High	Everett Griffiths	Yes

Showing 1–5 of 5 reports