Ivy (TOOR, Lisa)

Ivy (TOOR, Lisa) is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #527 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Scripting, which accounts for 7 of their findings (88%). Other recurring categories include SQL Injection. The average CVSS score across these disclosures is 6.6, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes BigBlueButton (1), Bus Ticket Booking with Seat Reservation (1), Coupon Affiliates (1), across 8 distinct plugins, themes and core versions in total.

6 of the 8 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "Ultimate Addons for Contact Form 7 <= 3.1.23 - Authenticated (Subscriber+) SQL Injection via id", scores 8.8 out of 10.

2023
Critical
High
Medium
Low
Global Rank

#527

of 3,515 researchers

Vulns

8

Critical0
High2
Medium6
Low0
Affected Assets

8

8plugins
Avg CVSS

6.6

Average score of vulnerabilities

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C