George Stephanis

George Stephanis is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #826 of 3,515 contributors. The disclosure was published in 2021.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 8.7, peaking at 9.6. Severity breakdown: 2 critical and 2 high.

The most affected software includes Patreon WordPress (4), across 1 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix. The most severe finding, "Patreon WordPress <= 1.7.0 - Reflected Cross-Site Scripting", scores 9.6 out of 10.

2021

Critical

High

Medium

Low

Global Rank

#826

of 3,515 researchers

Vulns

Critical2

High2

Medium0

Low0

Affected Assets

1plugin

Avg CVSS

8.7

Average score of vulnerabilities

Researcher Submissions

4 records


2021-03-26 00:00	Patreon WordPress < 1.7.0 - Local File Disclosure Patreon WordPress < 1.7.0	`CVE-2021-24227`	7.5 High	George Stephanis	Yes
2021-03-26 00:00	Patreon WordPress <= 1.7.0 - Reflected Cross-Site Scripting Patreon WordPress < 1.7.2	`CVE-2021-24228`	9.6 Critical	George Stephanis	Yes
2021-03-26 00:00	Patreon WordPress <= 1.6.9 - Cross-Site Request Forgery Patreon WordPress < 1.7.0	`CVE-2021-24230`	8.1 High	George Stephanis	Yes
2021-03-26 00:00	Patreon WordPress <= 1.7.0 - Reflected Cross-Site Scripting Patreon WordPress < 1.7.2	`CVE-2021-24229`	9.6 Critical	George Stephanis	Yes

Showing 1–4 of 4 reports