James Hooker

James Hooker is a security researcher credited with 53 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #113 of 3,515 contributors. Their disclosures were published between 2014 and 2015. The most productive year was 2015, with 37 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 25 of their findings (47%). Other recurring categories include SQL Injection, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 7.2, peaking at 9.8. Severity breakdown: 11 critical and 16 high.

The most affected software includes NewStatPress (3), Anti-Malware Security and Brute-Force… (2), Cart66 Lite : (2), across 45 distinct plugins, themes and core versions in total.

52 of the 53 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "NewStatPress < 1.0.6 - SQL Injection", scores 9.8 out of 10.