High-Tech Bridge Security Research Lab

High-Tech Bridge Security Research Lab is a security researcher credited with 47 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #128 of 3,515 contributors. Their disclosures were published between 2010 and 2015. The most productive year was 2014, with 16 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 28 of their findings (60%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.9, peaking at 9.8. Severity breakdown: 7 critical and 11 high.

The most affected software includes Broadcast Live Video (4), TheCartPress eCommerce Shopping Cart (4), Backup, Restore and Migrate your sites… (2), across 40 distinct plugins, themes and core versions in total.

37 of the 47 disclosed issues have a vendor fix, while 10 remain unpatched. The most severe finding, "Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 0.59 - SQL Injection", scores 9.8 out of 10.

201020112012201320142015
Critical
High
Medium
Low
Global Rank

#128

of 3,515 researchers

Vulns

47

Critical7
High11
Medium29
Low0
Affected Assets

41

41plugins
Avg CVSS

6.9

Average score of vulnerabilities

Researcher Submissions

47 records
2015-12-02 00:00CVE-2015-8354
6.1
Medium
High-Tech Bridge Security Research LabYes
2015-12-02 00:00CVE-2015-8353
6.1
Medium
High-Tech Bridge Security Research LabYes
2015-11-04 00:00CVE-2015-8351
9.0
Critical
High-Tech Bridge Security Research LabYes
2015-11-04 00:00CVE-2015-8350
6.1
Medium
High-Tech Bridge Security Research LabYes
2015-07-29 00:00CVE-2015-5535
6.1
Medium
High-Tech Bridge Security Research LabNo
2015-07-22 00:00CVE-2015-5532
6.1
Medium
High-Tech Bridge Security Research LabYes
2015-05-20 00:00CVE-2015-3647
7.1
High
High-Tech Bridge Security Research LabYes
2015-05-06 00:00CVE-2015-3421
6.1
Medium
High-Tech Bridge Security Research LabYes
2015-04-29 00:00CVE-2015-3301
4.9
Medium
High-Tech Bridge Security Research LabNo
2015-04-29 00:00CVE-2015-3302
7.5
High
High-Tech Bridge Security Research LabNo
Showing 1–10 of 47 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C