Jonas Lejon

Jonas Lejon is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,038 of 3,515 contributors. Their disclosures were published between 2017 and 2018. The most productive year was 2017, with 2 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 1 of their findings (33%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, SQL Injection. The average CVSS score across these disclosures is 8.0, peaking at 9.8. Severity breakdown: 1 critical and 1 high.

The most affected software includes Loginizer (2), Unyson (1), across 2 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix. The most severe finding, "Loginizer <= 1.3.5 - Blind SQL Injection", scores 9.8 out of 10.

20172018

Critical

High

Medium

Low

Global Rank

#1038

of 3,515 researchers

Vulns

Critical1

High1

Medium1

Low0

Affected Assets

2plugins

Avg CVSS

8.0

Average score of vulnerabilities

Researcher Submissions

3 records


2018-09-15 00:00	Unyson <= 2.7.18 - Sensitive Information Exposure Unyson <= 2.7.18	`N/A`	5.3 Medium	Jonas Lejon	Yes
2017-08-08 00:00	Loginizer <= 1.3.5 - Blind SQL Injection Loginizer < 1.3.6	`CVE-2017-12650`	9.8 Critical	Jonas Lejon	Yes
2017-08-08 00:00	Loginizer <= 1.3.5 - Cross-Site Request Forgery Loginizer < 1.3.6	`CVE-2017-12651`	8.8 High	Jonas Lejon	Yes

Showing 1–3 of 3 reports