Felipe Restrepo Rodriguez (pfelilpe)

Felipe Restrepo Rodriguez (pfelilpe) is a security researcher credited with 26 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #211 of 3,515 contributors. Their disclosures were published between 2021 and 2024. The most productive year was 2023, with 12 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 24 of their findings (92%). Other recurring categories include Open Redirect, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 5.2, peaking at 9.8. Severity breakdown: 1 critical and 2 high.

The most affected software includes Watu Quiz (2), WS Form LITE (2), AI Engine (1), across 24 distinct plugins, themes and core versions in total.

25 of the 26 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Bit Form <= 1.8.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution", scores 9.8 out of 10.

2021202220232024
Critical
High
Medium
Low
Global Rank

#211

of 3,515 researchers

Vulns

26

Critical1
High2
Medium23
Low0
Affected Assets

25

25plugins
Avg CVSS

5.2

Average score of vulnerabilities

Researcher Submissions

26 records
2024-05-08 00:00CVE-2024-3921
4.4
Medium
Felipe Restrepo Rodriguez (pfelilpe)Yes
2024-03-29 00:00CVE-2024-30548
4.4
Medium
Felipe Restrepo Rodriguez (pfelilpe)Yes
2024-02-19 00:00CVE-2024-0656
4.4
Medium
Felipe Restrepo Rodriguez (pfelilpe)Yes
2024-02-09 00:00CVE-2024-0658
4.4
Medium
Felipe Restrepo Rodriguez (pfelilpe)Yes
2024-02-07 00:00CVE-2023-6923
6.1
Medium
Felipe Restrepo Rodriguez (pfelilpe)Yes
2023-12-11 00:00CVE-2023-6037
4.4
Medium
Felipe Restrepo Rodriguez (pfelilpe)Yes
2023-08-15 00:00CVE-2023-3499
4.4
Medium
Felipe Restrepo Rodriguez (pfelilpe)Yes
2023-06-26 00:00CVE-2023-0439
4.8
Medium
Felipe Restrepo Rodriguez (pfelilpe)Yes
2023-06-19 00:00CVE-2023-2578
4.4
Medium
Felipe Restrepo Rodriguez (pfelilpe)Yes
2023-05-19 00:00CVE-2023-2580
4.4
Medium
Felipe Restrepo Rodriguez (pfelilpe)Yes
Showing 1–10 of 26 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C