HauntIT

HauntIT is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #442 of 3,515 contributors. The disclosure was published in 2014.

Their research concentrates on Cross-Site Scripting, which accounts for 9 of their findings (90%). Other recurring categories include SQL Injection. The average CVSS score across these disclosures is 6.6, peaking at 9.8. Severity breakdown: 1 critical and 1 high.

The most affected software includes Welcart e-Commerce (2), Alpine Photo Tile for Instagram (1), Broadcast Live Video (1), across 9 distinct plugins, themes and core versions in total.

6 of the 10 disclosed issues have a vendor fix, while 4 remain unpatched. The most severe finding, "Welcart e-Commerce <= 2.9.1 - SQL Injection", scores 9.8 out of 10.

2014

Critical

High

Medium

Low

Global Rank

#442

of 3,515 researchers

Vulns

Critical1

High1

Medium8

Low0

Affected Assets

9plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

10 records


2014-08-01 00:00	Alpine PhotoTile For Instagram < 1.2.9 - Cross-Site Scripting Alpine Photo Tile for Instagram < 1.2.9	`N/A`	6.1 Medium	HauntIT	Yes
2014-08-01 00:00	BSK PDF Manager 1.3 - 2.9 - Authenticated Stored Cross-Site Scripting BSK PDF Manager 1.3 – 2.9	`N/A`	6.4 Medium	HauntIT	Yes
2014-08-01 00:00	WP Post to PDF <= 2.3.1 - Cross-Site Scripting WP Post to PDF <= 2.3.1	`N/A`	6.1 Medium	HauntIT	No
2014-03-04 00:00	Welcart e-Commerce <= 2.9.1 - SQL Injection Welcart e-Commerce <= 2.9.1	`CVE-2014-10017`	9.8 Critical	HauntIT	Yes
2014-03-03 00:00	Welcart e-Commerce <= 1.3.12 - Cross-Site Scripting Welcart e-Commerce <= 1.3.12	`CVE-2014-10016`	6.1 Medium	HauntIT	No
2014-02-26 00:00	Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 4.29.6 - Cross-Site Scripting Broadcast Live Video <= 4.29.6	`CVE-2014-2297`	6.1 Medium	HauntIT	Yes
2014-02-26 00:00	Zedity – The Layout-Free Content Editor < 2.5.1 - Reflected Cross-Site Scripting Zedity < 2.5.1	`N/A`	6.1 Medium	HauntIT	Yes
2014-02-26 00:00	Widget Control Powered By Everyblock <= 1.0.1 - Reflected Cross-Site Scripting Widget Control Powered By Everyblock <= 1.0.1	`N/A`	6.1 Medium	HauntIT	No
2014-02-25 00:00	Thank You Counter Button <= 1.9.3 - Cross-Site Scripting Thank You Counter Button <= 1.9.3	`CVE-2014-2315`	6.1 Medium	HauntIT	No
2014-02-23 00:00	MP3-jPlayer < 1.8.8 - Cross-Site Scripting MP3-jPlayer < 1.8.8	`N/A`	7.1 High	HauntIT	Yes

Showing 1–10 of 10 reports