I8BL

I8BL is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #450 of 3,515 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2025, with 8 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (20%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.2, peaking at 9.8. Severity breakdown: 1 critical and 3 high.

The most affected software includes One to one user Chat by WPGuppy (2), Ajax Contact Form (1), Barcode Scanner (+Mobile App) (1), across 9 distinct plugins, themes and core versions in total.

9 of the 10 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "WPGuppy <= 1.1.0 - Unauthenticated PHP Object Injection", scores 9.8 out of 10.

20242025

Critical

High

Medium

Low

Global Rank

#450

of 3,515 researchers

Vulns

Critical1

High3

Medium6

Low0

Affected Assets

9plugins

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

10 records


2025-08-20 00:00	LifePress <= 2.1.3 - Missing Authorization LifePress <= 2.1.3	`CVE-2025-53337`	4.3 Medium	I8BL	Yes
2025-02-11 00:00	Easy Booked – Appointment Booking and Scheduling Management System for WordPress <= 2.4.5 - Cross-Site Request Forgery Easy Booked <= 2.4.5	`CVE-2025-22634`	4.3 Medium	I8BL	Yes
2025-01-24 00:00	WP Ultimate Exporter <= 2.9 - Authenticated (Admin+) Arbitrary File Read Export All Posts <= 2.9	`CVE-2025-24611`	4.9 Medium	I8BL	Yes
2025-01-24 00:00	Tourfic <= 2.15.3 - Authenticated (Admin+) Arbitrary File Upload Tourfic <= 2.15.3	`CVE-2025-24650`	7.2 High	I8BL	Yes
2025-01-15 00:00	Barcode Scanner with Inventory & Order Manager <= 1.6.7 - Authenticated (Admin+) Arbitrary File Upload Barcode Scanner (+Mobile App) <= 1.6.7	`CVE-2025-22723`	7.2 High	I8BL	Yes
2025-01-14 00:00	Ajax Contact Form <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Ajax Contact Form <= 1.4.1	`CVE-2025-22761`	6.4 Medium	I8BL	Yes
2025-01-03 00:00	WPGuppy <= 1.1.0 - Authenticated (Subscriber+) Privilege Escalation One to one user Chat by WPGuppy <= 1.1.0	`CVE-2024-56280`	8.8 High	I8BL	Yes
2025-01-03 00:00	WPGuppy <= 1.1.0 - Unauthenticated PHP Object Injection One to one user Chat by WPGuppy <= 1.1.0	`CVE-2024-49222`	9.8 Critical	I8BL	Yes
2024-12-30 00:00	Just Writing Statistics <= 4.7 - Authenticated (Administrator+) SQL Injection Just Writing Statistics <= 4.7	`CVE-2024-56250`	4.9 Medium	I8BL	Yes
2024-12-14 00:00	Better WP Login Page <= 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting Better WP Login Page <= 1.1.2	`CVE-2024-54442`	4.4 Medium	I8BL	No

Showing 1–10 of 10 reports