Jinson Varghese Behanan

Jinson Varghese Behanan is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #439 of 3,515 contributors. Their disclosures were published between 2019 and 2021. The most productive year was 2020, with 6 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 7 of their findings (70%). Other recurring categories include Cross-Site Request Forgery (CSRF), Injection. The average CVSS score across these disclosures is 6.8, peaking at 8.8. Severity breakdown: 0 critical and 3 high.

The most affected software includes Contact Form 7 (1), Cooked (1), Cooked Pro (1), across 10 distinct plugins, themes and core versions in total.

All 10 disclosed issues have since received a vendor fix. The most severe finding, "Tutor LMS < 1.5.3 - Cross-Site Request Forgery", scores 8.8 out of 10.

201920202021

Critical

High

Medium

Low

Global Rank

#439

of 3,515 researchers

Vulns

Critical0

High3

Medium7

Low0

Affected Assets

10plugins

Avg CVSS

6.8

Average score of vulnerabilities

Researcher Submissions

10 records


2021-06-21 00:00	Cooked <= 1.7.9 - Reflected Cross-Site Scripting Cooked <= 1.7.9	`N/A`	6.1 Medium	Jinson Varghese Behanan	Yes
2021-03-30 00:00	Cooked Pro <= 1.7.5.5 - Reflected Cross-Site Scripting Cooked Pro < 1.7.5.6	`CVE-2021-24233`	6.1 Medium	Jinson Varghese Behanan	Yes
2021-03-30 00:00	Ivory Search <= 4.6 - Reflected Cross Site Scripting Ivory Search <= 4.6	`CVE-2021-24234`	6.1 Medium	Jinson Varghese Behanan	Yes
2020-12-17 00:00	Contact Form 7 <= 5.3.1 - Arbitrary File Upload via Bypass Contact Form 7 < 5.3.2	`CVE-2020-35489`	8.1 High	Jinson Varghese Behanan	Yes
2020-06-25 00:00	Coming Soon Page by SeedProd <= 5.1.1 - Authenticated Stored Cross-Site Scripting Website Builder by SeedProd < 5.1.2	`CVE-2020-15038`	6.4 Medium	Jinson Varghese Behanan	Yes
2020-02-18 00:00	Contact Form by WPForms <= 1.5.8.2 - Stored Cross-Site Scripting WPForms < 1.5.9	`CVE-2020-10385`	6.4 Medium	Jinson Varghese Behanan	Yes
2020-02-04 00:00	Tutor LMS < 1.5.3 - Cross-Site Request Forgery Tutor LMS < 1.5.3	`CVE-2020-8615`	8.8 High	Jinson Varghese Behanan	Yes
2020-02-01 00:00	Strong Testimonials <= 2.40.0 - Stored Cross Site Scripting Strong Testimonials <= 2.40.0	`CVE-2020-8549`	6.1 Medium	Jinson Varghese Behanan	Yes
2020-01-15 00:00	LearnDash 3.0.0-3.1.1 - Reflected Cross Site Scripting issue on the [ld_profile] search field LearnDash LMS 3.0.0 – 3.1.1	`CVE-2020-7108`	6.1 Medium	Jinson Varghese Behanan	Yes
2019-09-19 00:00	Export Users to CSV < 1.4 - CSV Injection Export Users to CSV < 1.4	`CVE-2020-9466`	7.4 High	Jinson Varghese Behanan	Yes

Showing 1–10 of 10 reports