foobar7

foobar7 is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #553 of 3,515 contributors. Their disclosures were published between 2022 and 2023. The most productive year was 2023, with 5 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 3 of their findings (38%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Cross-Site Scripting. The average CVSS score across these disclosures is 5.3, peaking at 9.8. Severity breakdown: 1 critical and 0 high.

The most affected software includes Product Vendors (3), Jetpack CRM (2), woocommerce-checkout-field-editor (2), across 4 distinct plugins, themes and core versions in total.

All 8 disclosed issues have since received a vendor fix. The most severe finding, "WooCommerce Products Vendor <= 2.1.65 - Unauthenticated SQL Injection", scores 9.8 out of 10.

20222023

Critical

High

Medium

Low

Global Rank

#553

of 3,515 researchers

Vulns

Critical1

High0

Medium7

Low0

Affected Assets

4plugins

Avg CVSS

5.3

Average score of vulnerabilities

Researcher Submissions

8 records


2023-09-12 00:00	Jetpack CRM <= 5.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Jetpack CRM <= 5.5.0	`N/A`	4.4 Medium	foobar7	Yes
2023-09-12 00:00	Jetpack CRM <= 5.5.0 - Authenticated (Client+) Stored Cross-Site Scripting Jetpack CRM <= 5.5.0	`N/A`	6.4 Medium	foobar7	Yes
2023-09-11 00:00	WooCommerce Subscription < 4.6.0 - Cross-Site Request Forgery WooCommerce Subscription < 4.6.0	`N/A`	4.3 Medium	foobar7	Yes
2023-09-11 00:00	Checkout Field Editor (Premium) < 1.7.5 - Cross-Site Request Forgery woocommerce-checkout-field-editor < 1.7.5	`N/A`	4.3 Medium	foobar7	Yes
2023-09-11 00:00	Checkout Field Editor <= 1.7.4 - Cross-Site Request Forgery to Checkout Fields Update Checkout Field Editor <= 1.7.4	`N/A`	4.3 Medium	foobar7	Yes
2022-10-04 00:00	WooCommerce Products Vendor <= 2.1.65 - Insecure Direct Object Reference to Note Creation Product Vendors <= 2.1.65	`N/A`	4.3 Medium	foobar7	Yes
2022-10-04 00:00	WooCommerce Products Vendor <= 2.1.68 - Insecure Direct Object Reference to Vendor Commission Percentage Update Product Vendors <= 2.1.68	`N/A`	4.3 Medium	foobar7	Yes
2022-10-04 00:00	WooCommerce Products Vendor <= 2.1.65 - Unauthenticated SQL Injection Product Vendors <= 2.1.65	`N/A`	9.8 Critical	foobar7	Yes

Showing 1–8 of 8 reports