Huli, Cymetrics

Huli, Cymetrics is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #528 of 3,515 contributors. The disclosure was published in 2022.

Their research concentrates on Incorrect Authorization, which accounts for 4 of their findings (50%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Missing Authorization. The average CVSS score across these disclosures is 6.6, peaking at 9.8. Severity breakdown: 1 critical and 2 high.

The most affected software includes Booking for Appointments and Events… (3), Salon Booking System (2), VikBooking Hotel Booking Engine & PMS (2), across 4 distinct plugins, themes and core versions in total.

All 8 disclosed issues have since received a vendor fix. The most severe finding, "VikBooking Hotel Booking Engine & PMS <= 1.5.3 - Arbitrary File Upload", scores 9.8 out of 10.

2022

Critical

High

Medium

Low

Global Rank

#528

of 3,515 researchers

Vulns

Critical1

High2

Medium5

Low0

Affected Assets

4plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

8 records


2022-04-18 10:14	VikBooking Hotel Booking Engine & PMS <= 1.5.3 - Arbitrary File Upload VikBooking Hotel Booking Engine & PMS <= 1.5.3	`CVE-2022-27862`	9.8 Critical	Huli, Cymetrics	Yes
2022-04-18 10:14	VikBooking Hotel Booking Engine & PMS <= 1.5.3 - Sensitive Information Exposure VikBooking Hotel Booking Engine & PMS <= 1.5.3	`CVE-2022-27863`	5.3 Medium	Huli, Cymetrics	Yes
2022-03-21 00:00	Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Data Disclosure Salon Booking System <= 7.6.2	`CVE-2022-0919`	5.3 Medium	Huli, Cymetrics	Yes
2022-03-21 00:00	Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Information Disclosure Salon Booking System <= 7.6.2	`CVE-2022-0920`	7.5 High	Huli, Cymetrics	Yes
2022-03-14 00:00	Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure Booking for Appointments and Events… < 1.0.49	`CVE-2022-0825`	5.4 Medium	Huli, Cymetrics	Yes
2022-03-14 00:00	Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam Booking for Appointments and Events… < 1.0.48	`CVE-2022-0837`	6.4 Medium	Huli, Cymetrics	Yes
2022-03-09 00:00	Booking Package <= 1.5.28 - Unauthenticated Sensitive Data Disclosure Booking Package < 1.5.29	`CVE-2022-0709`	7.5 High	Huli, Cymetrics	Yes
2022-03-01 00:00	Appointment and Event Booking Calendar for WordPress - Amelia < 1.0.47 - Arbitrary Booking Update and Sensitive Data Exposure Booking for Appointments and Events… < 1.0.47	`CVE-2022-0720`	5.4 Medium	Huli, Cymetrics	Yes

Showing 1–8 of 8 reports