Gabriel3476

Gabriel3476 is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,106 of 3,515 contributors. The disclosure was published in 2022.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 1 of their findings (33%). Other recurring categories include Cross-Site Scripting, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 6.6, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes VikBooking Hotel Booking Engine & PMS (3), across 1 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix. The most severe finding, "VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting", scores 8.8 out of 10.

2022

Critical

High

Medium

Low

Global Rank

#1106

of 3,515 researchers

Vulns

Critical0

High1

Medium2

Low0

Affected Assets

1plugin

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

3 records


2022-04-21 00:00	VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting VikBooking Hotel Booking Engine & PMS < 1.5.8	`CVE-2022-1407`	8.8 High	Gabriel3476	Yes
2022-04-21 00:00	VikBooking Hotel Booking Engine & PMS <= 1.5.8 - Arbitrary File Upload VikBooking Hotel Booking Engine & PMS < 1.5.8	`CVE-2022-1409`	5.5 Medium	Gabriel3476	Yes
2022-04-21 00:00	VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Admin+ Stored Cross-Site Scripting VikBooking Hotel Booking Engine & PMS < 1.5.8	`CVE-2022-1408`	5.5 Medium	Gabriel3476	Yes

Showing 1–3 of 3 reports