Harald Eilertsen

Harald Eilertsen is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #429 of 3,515 contributors. Their disclosures were published between 2021 and 2023. The most productive year was 2021, with 7 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 2 of their findings (20%). Other recurring categories include Hidden Functionality, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 8.2, peaking at 9.8. Severity breakdown: 4 critical and 4 high.

The most affected software includes Workreap - Freelance Marketplace… (3), AccessPress Social Icons (1), Business Hours Pro WordPress Plugin (1), across 8 distinct plugins, themes and core versions in total.

8 of the 10 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "Member Hero <= 1.0.9 - Remote Code Execution", scores 9.8 out of 10.

202120222023

Critical

High

Medium

Low

Global Rank

#429

of 3,515 researchers

Vulns

Critical4

High4

Medium2

Low0

Affected Assets

6plugins2themes

Avg CVSS

8.2

Average score of vulnerabilities

Researcher Submissions

10 records


2023-01-25 00:00	Loan Comparison <= 1.5.1 - Reflected Cross-Site Scripting Loan Comparison <= 1.5.1	`CVE-2023-0442`	6.1 Medium	Harald Eilertsen	Yes
2022-05-18 00:00	Member Hero <= 1.0.9 - Remote Code Execution Member Hero <= 1.0.9	`CVE-2022-0885`	9.8 Critical	Harald Eilertsen	No
2022-01-18 00:00	AccessPress Social Icons 1.8.2 - Backdoor AccessPress Social Icons 1.8.2	`N/A`	7.5 High	Harald Eilertsen	Yes
2021-10-13 00:00	AccessPress Anonymous Post = 2.8.0 - Backdoored Frontend Post WordPress Plugin 2.8.0	`CVE-2021-24867`	8.8 High	Harald Eilertsen	Yes
2021-09-13 00:00	Software License Manager <= 4.5.0 - Cross-Site Request Forgery leading to Arbitrary Domain Deletion Software License Manager < 4.5.1	`CVE-2021-24711`	4.3 Medium	Harald Eilertsen	Yes
2021-07-02 00:00	Workreap - Freelance Marketplace and Directory WordPress Theme < 2.2.2 - Arbitrary File Upload Workreap - Freelance Marketplace… < 2.2.2	`CVE-2021-24499`	9.8 Critical	Harald Eilertsen	Yes
2021-07-02 00:00	Workreap < 2.2.2 - Cross-Site Request Forgery Workreap - Freelance Marketplace… < 2.2.2	`CVE-2021-24500`	8.1 High	Harald Eilertsen	Yes
2021-06-29 00:00	Workreap Theme < 2.2.2 - Authorization Bypass Workreap - Freelance Marketplace… < 2.2.2	`CVE-2021-24501`	8.1 High	Harald Eilertsen	Yes
2021-06-09 00:00	Motor – Cars, Parts, Service, Equipments and Accessories WooCommerce Store < 3.1.0 - Local File Inclusion Motor < 3.1.0	`CVE-2021-24375`	9.8 Critical	Harald Eilertsen	Yes
2021-04-02 00:00	Business Hours Pro <= 5.5.0 - Arbitrary File Upload Business Hours Pro WordPress Plugin <= 5.5.0	`CVE-2021-24240`	9.8 Critical	Harald Eilertsen	No

Showing 1–10 of 10 reports