Fioravante Souza

Fioravante Souza is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #513 of 3,515 contributors. Their disclosures were published between 2021 and 2023. The most productive year was 2021, with 4 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (50%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 8.1, peaking at 9.8. Severity breakdown: 4 critical and 2 high.

The most affected software includes Patreon WordPress (4), Add to Feedly (1), Gravity Forms (1), across 5 distinct plugins, themes and core versions in total.

7 of the 8 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Royal Elementor Addons and Templates <= 1.3.78 - Unauthenticated Arbitrary File Upload", scores 9.8 out of 10.

202120222023

Critical

High

Medium

Low

Global Rank

#513

of 3,515 researchers

Vulns

Critical4

High2

Medium2

Low0

Affected Assets

4plugins1theme

Avg CVSS

8.1

Average score of vulnerabilities

Researcher Submissions

8 records


2023-10-09 00:00	Royal Elementor Addons and Templates <= 1.3.78 - Unauthenticated Arbitrary File Upload Royal Addons for Elementor <= 1.3.78	`CVE-2023-5360`	9.8 Critical	Fioravante Souza	Yes
2023-06-21 00:00	Gravity Forms <= 2.7.4 - Reflected Cross-Site Scripting Gravity Forms <= 2.7.4	`CVE-2023-2701`	6.1 Medium	Fioravante Souza	Yes
2023-05-02 00:00	Add to Feedly <= 1.2.11 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings Add to Feedly <= 1.2.11	`CVE-2023-2470`	4.4 Medium	Fioravante Souza	No
2022-11-21 00:00	Listingo <= 3.2.5 - Unauthenticated Arbitrary File Upload Listingo <= 3.2.5	`CVE-2022-3921`	9.8 Critical	Fioravante Souza	Yes
2021-03-26 00:00	Patreon WordPress < 1.7.0 - Local File Disclosure Patreon WordPress < 1.7.0	`CVE-2021-24227`	7.5 High	George Stephanis	Yes
2021-03-26 00:00	Patreon WordPress <= 1.7.0 - Reflected Cross-Site Scripting Patreon WordPress < 1.7.2	`CVE-2021-24228`	9.6 Critical	George Stephanis	Yes
2021-03-26 00:00	Patreon WordPress <= 1.6.9 - Cross-Site Request Forgery Patreon WordPress < 1.7.0	`CVE-2021-24230`	8.1 High	George Stephanis	Yes
2021-03-26 00:00	Patreon WordPress <= 1.7.0 - Reflected Cross-Site Scripting Patreon WordPress < 1.7.2	`CVE-2021-24229`	9.6 Critical	George Stephanis	Yes

Showing 1–8 of 8 reports