Felipe de Avila

Felipe de Avila is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #783 of 3,515 contributors. The disclosure was published in 2022.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 1 of their findings (20%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 5.8, peaking at 7.5. Severity breakdown: 0 critical and 2 high.

The most affected software includes Popup (1), Smart Popup by Supsystic (1), UsersWP (1), across 5 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix.

2022

Critical

High

Medium

Low

Global Rank

#783

of 3,515 researchers

Vulns

Critical0

High2

Medium3

Low0

Affected Assets

5plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

5 records


2022-04-18 00:00	Popup by Supsystic <= 1.10.8 - Sensitive Information Disclosure Smart Popup by Supsystic < 1.10.9	`CVE-2022-0424`	5.3 Medium	Felipe de Avila	Yes
2022-02-14 00:00	UsersWP <= 1.2.3 - Subscriber+ User Avatar Override UsersWP < 1.2.3.1	`CVE-2022-0442`	4.3 Medium	Felipe de Avila	Yes
2022-01-31 00:00	WP Review Slider < 11.0 - SQL Injection WP Review Slider < 11.0	`CVE-2022-0383`	7.2 High	Felipe de Avila	Yes
2022-01-26 00:00	WP Ultimate CSV Importer <= 6.4.2 - Admin+ Stored Cross-Site Scripting WP Ultimate CSV Importer < 6.4.3	`CVE-2022-0360`	4.8 Medium	Felipe de Avila	Yes
2022-01-17 00:00	Popup \| Custom Popup Builder <= 1.3 - Denial of Service Popup < 1.3.1	`CVE-2022-0214`	7.5 High	Felipe de Avila	Yes

Showing 1–5 of 5 reports