FullSecurity.org

FullSecurity.org is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,020 of 3,515 contributors. The disclosure was published in 2015.

Their research concentrates on Path Traversal, which accounts for 2 of their findings (67%). Other recurring categories include PHP Remote File Inclusion. The average CVSS score across these disclosures is 8.3, peaking at 9.8. Severity breakdown: 1 critical and 2 high.

The most affected software includes mTheme-Unus (2), estrutura-basica (1), across 2 distinct plugins, themes and core versions in total.

1 of the 3 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "mTheme-Unus (All Versions) - Local File Inclusion", scores 9.8 out of 10.

2015

Critical

High

Medium

Low

Global Rank

#1020

of 3,515 researchers

Vulns

Critical1

High2

Medium0

Low0

Affected Assets

2themes

Avg CVSS

8.3

Average score of vulnerabilities

Researcher Submissions

3 records


2015-09-30 00:00	mTheme-Unus < 2.3 - Directory Traversal to Unauthenticated Arbitrary File Read mTheme-Unus < 2.3	`CVE-2015-9406`	7.5 High	FullSecurity.org	Yes
2015-09-27 00:00	mTheme-Unus (All Versions) - Local File Inclusion mTheme-Unus *	`N/A`	9.8 Critical	FullSecurity.org	No
2015-09-13 00:00	estrutura-basica (All Known Versions) - Path Traversal estrutura-basica *	`CVE-2015-9473`	7.5 High	FullSecurity.org	No

Showing 1–3 of 3 reports