Glyn Wintle

Glyn Wintle is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #396 of 3,515 contributors. Their disclosures were published between 2014 and 2020. The most productive year was 2016, with 3 findings.

Their research concentrates on SQL Injection, which accounts for 3 of their findings (27%). Other recurring categories include Cross-Site Request Forgery (CSRF), PHP Remote File Inclusion. The average CVSS score across these disclosures is 7.4, peaking at 9.8. Severity breakdown: 1 critical and 8 high.

The most affected software includes Post Indexer (2), Ajax Pagination (twitter Style) (1), Citizen Space (1), across 10 distinct plugins, themes and core versions in total.

9 of the 11 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "Ajax Pagination (twitter Style) <= 1.1 - Local File Inclusion", scores 9.8 out of 10.

2014201520162017201820192020

Critical

High

Medium

Low

Global Rank

#396

of 3,515 researchers

Vulns

Critical1

High8

Medium2

Low0

Affected Assets

10plugins

Avg CVSS

7.4

Average score of vulnerabilities

Researcher Submissions

11 records


2020-02-05 00:00	WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion WP Fastest Cache < 0.9.0.3	`CVE-2020-36836`	8.0 High	Glyn Wintle	Yes
2020-02-05 00:00	Merge + Minify + Refresh <= 1.10.7 - Cross-Site Request Forgery leading to Arbitrary File Deletion and Site Reset Merge + Minify + Refresh < 1.10.8	`N/A`	8.3 High	Glyn Wintle	Yes
2018-07-12 00:00	Redirection <= 2.7.3 - Local File Inclusion Redirection <= 2.7.3	`CVE-2018-1000504`	7.2 High	Glyn Wintle	Yes
2017-10-20 00:00	CMS Tree Page View < 1.4 - Missing Authorization Checks CMS Tree Page View < 1.4	`N/A`	4.3 Medium	Glyn Wintle	Yes
2017-01-04 00:00	Stop User Enumeration <= 1.3.8 - Unauthenticated Username Enumeration Stop User Enumeration <= 1.3.8	`CVE-2017-1000226`	5.3 Medium	Glyn Wintle	Yes
2016-11-17 00:00	Relevanssi Premium < 1.14.6.1 - SQL Injection Relevanssi Premium < 1.14.6.1	`CVE-2016-10949`	8.8 High	Glyn Wintle	Yes
2016-11-17 00:00	Post Indexer <= 3.0.6.1 - Authenticated (Super Admin+) SQL Injection Post Indexer < 3.0.6.2	`CVE-2016-10947`	7.2 High	Glyn Wintle	Yes
2016-11-17 00:00	Post Indexer <= 3.0.6.1 - PHP Object Injection Post Indexer < 3.0.6.2	`CVE-2016-10948`	8.1 High	Glyn Wintle	Yes
2015-08-10 00:00	WP Symposium < 15.8 - Blind SQL Injection WP Symposium < 15.8	`N/A`	7.2 High	Glyn Wintle	Yes
2015-04-16 00:00	Citizen Space <= 1.1 - Reflected Cross-Site Scripting Citizen Space <= 1.1	`N/A`	7.1 High	Glyn Wintle	No

Showing 1–10 of 11 reports