Heine Pedersen

Heine Pedersen is a security researcher credited with 27 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #200 of 3,515 contributors. Their disclosures were published between 2012 and 2014. The most productive year was 2012, with 23 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 25 of their findings (93%). Other recurring categories include SQL Injection. The average CVSS score across these disclosures is 6.5, peaking at 9.8. Severity breakdown: 1 critical and 7 high.

The most affected software includes WP Forum Server (3), Newsletter Manager (2), Sharebar (2), across 23 distinct plugins, themes and core versions in total.

24 of the 27 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "Sharebar <= 1.2.1 - SQL Injection", scores 9.8 out of 10.

201220132014

Critical

High

Medium

Low

Global Rank

#200

of 3,515 researchers

Vulns

Critical1

High7

Medium19

Low0

Affected Assets

23plugins

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

27 records


2014-08-01 00:00	Subscribe2 – Form, Email Subscribers & Newsletters < 8.1 - Multiple Cross-Site Scripting Subscribe2 < 8.1	`N/A`	7.1 High	Heine Pedersen	Yes
2014-08-01 00:00	WP Easy Gallery <= 1.7 - Cross-Site Scripting WP Easy Gallery <= 1.7	`N/A`	6.1 Medium	Heine Pedersen	Yes
2014-08-01 00:00	Media Library Categories <= 1.1.1 - Unauthenticated Multiple Cross-Site Scripting Media Library Categories <= 1.1.1	`CVE-2012-6630`	6.1 Medium	Heine Pedersen	No
2014-08-01 00:00	Download Manager <= 2.2.2 - Cross-Site Scripting Download Manager <= 2.2.2	`N/A`	6.1 Medium	Heine Pedersen	Yes
2012-05-21 00:00	Share and Follow <= 1.80.3 - Cross-Site Scripting Share and Follow <= 1.80.3	`CVE-2012-2917`	7.2 High	Heine Pedersen	Yes
2012-05-15 00:00	EZPZ One Click Backup <= 12.03.10 - Cross-Site Scripting EZPZ One Click Backup <= 12.03.10	`N/A`	6.1 Medium	Heine Pedersen	No
2012-05-15 00:00	Sharebar <= 1.2.1 - SQL Injection Sharebar < 1.2.2	`CVE-2012-6719`	9.8 Critical	Heine Pedersen	Yes
2012-05-15 00:00	WP Statistics <= 2.2.4 - Cross-Site Scripting WP Statistics <= 2.2.4	`N/A`	6.1 Medium	Heine Pedersen	Yes
2012-05-15 00:00	Newsletter Manager < 1.0.2 - Cross-Site Scripting Newsletter Manager < 1.0.2	`CVE-2012-6628`	6.1 Medium	Heine Pedersen	Yes
2012-05-15 00:00	WP Forum Server < 1.7.4 - SQL Injection WP Forum Server < 1.7.4	`CVE-2012-6625`	7.2 High	Heine Pedersen	Yes

Showing 1–10 of 27 reports