Henri Salo (fgeek)

Henri Salo (fgeek) is a security researcher credited with 18 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #277 of 3,515 contributors. Their disclosures were published between 2013 and 2019. The most productive year was 2014, with 5 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 5 of their findings (28%). Other recurring categories include Path Traversal, Code Injection. The average CVSS score across these disclosures is 7.3, peaking at 9.8. Severity breakdown: 3 critical and 7 high.

The most affected software includes WP Human Resource Management (2), Adminimize (1), Advanced Dewplayer (1), across 17 distinct plugins, themes and core versions in total.

14 of the 18 disclosed issues have a vendor fix, while 4 remain unpatched. The most severe finding, "Easy Forms for Mailchimp <= 6.5.2 - Code Injection", scores 9.8 out of 10.

2013201420152016201720182019

Critical

High

Medium

Low

Global Rank

#277

of 3,515 researchers

Vulns

Critical3

High7

Medium8

Low0

Affected Assets

17plugins

Avg CVSS

7.3

Average score of vulnerabilities

Researcher Submissions

18 records


2019-07-01 00:00	Easy Forms for Mailchimp <= 6.5.2 - Code Injection Easy Forms for Mailchimp < 6.5.3	`CVE-2019-15318`	9.8 Critical	Henri Salo (fgeek)	Yes
2019-03-17 00:00	WP Human Resource Management < 2.2.6 - Sensitive Information Disclosure WP Human Resource Management < 2.2.6	`CVE-2019-9574`	7.5 High	Henri Salo (fgeek)	Yes
2019-02-23 00:00	WP Human Resource Management Plugin < 2.2.6 - Authorization Bypass WP Human Resource Management < 2.2.6	`CVE-2019-9573`	7.5 High	Henri Salo (fgeek)	Yes
2019-02-05 00:00	WP Google Maps < 7.10.43 - Reflected Cross-Site Scripting WP Go Maps <= 7.10.41	`CVE-2019-9912`	6.1 Medium	Henri Salo (fgeek)	Yes
2016-05-10 00:00	Nelio AB Testing < 4.5.0 - Directory Traversal Nelio A/B Testing <= 4.4.4	`CVE-2016-10977`	6.5 Medium	Henri Salo (fgeek)	Yes
2016-03-01 00:00	Gravityforms <= 1.9.15.11 - Cross-Site Scripting Gravity Forms <= 1.9.15.11	`N/A`	4.7 Medium	Henri Salo (fgeek)	Yes
2016-02-25 00:00	Export WordPress Data with Advanced Filters < 1.2 - SQL Injection Export All Posts <= 1.1	`CVE-2016-11000`	9.8 Critical	Henri Salo (fgeek)	Yes
2015-05-29 00:00	WP Smiley <= 1.4.1 - Cross-Site Request Forgery to Cross-Site Scripting wp-smiley <= 1.4.1	`CVE-2015-4140`	6.1 Medium	Henri Salo (fgeek)	No
2014-12-16 00:00	DB Backup < 5.0 - Directory Traversal DB Backup < 5.0	`CVE-2014-9119`	7.5 High	Henri Salo (fgeek)	Yes
2014-12-01 00:00	CM Download Manager <= 2.0.6 - Cross-Site Request Forgery to Cross-Site Scripting CM Download Manager <= 2.0.6	`CVE-2014-9129`	6.1 Medium	Henri Salo (fgeek)	Yes

Showing 1–10 of 18 reports