Jonatas Souza Villa Flor

Jonatas Souza Villa Flor is a security researcher credited with 7 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #608 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (29%). Other recurring categories include Deserialization Of Untrusted Data, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 5.8, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Vrm 360 3D Model Viewer (2), 123.chat (1), Enable Media Replace (1), across 6 distinct plugins, themes and core versions in total.

5 of the 7 disclosed issues have a vendor fix, while 2 remain unpatched.

2023

Critical

High

Medium

Low

Global Rank

#608

of 3,515 researchers

Vulns

Critical0

High1

Medium6

Low0

Affected Assets

6plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

7 records


2023-11-24 00:00	Vrm 360 3D Model Viewer <= 1.2.1 - Authenticated (Contributor+) Arbitrary File Upload Vrm 360 3D Model Viewer <= 1.2.1	`CVE-2023-4311`	5.4 Medium	Jonatas Souza Villa Flor	No
2023-09-25 00:00	Vrm 360 3D Model Viewer <= 1.2.1 - Authenticated(Subscriber+) Sensitive Information Exposure Vrm 360 3D Model Viewer <= 1.2.1	`CVE-2023-5177`	4.3 Medium	Jonatas Souza Villa Flor	No
2023-09-14 00:00	Enable Media Replace <= 4.1.2 - Authenticated(Author+) PHP Object Injection Enable Media Replace < 4.1.3	`CVE-2023-4643`	6.6 Medium	Jonatas Souza Villa Flor	Yes
2023-08-28 00:00	Import XML and RSS Feeds <= 2.1.3 - Authenticated (Admin+) Arbitrary File Upload Import XML and RSS Feeds <= 2.1.3	`CVE-2023-4300`	7.2 High	Jonatas Souza Villa Flor	Yes
2023-08-17 00:00	Serial Codes Generator and Validator with WooCommerce Support <= 2.4.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting Serial Codes Generator and Validator… < 2.4.15	`CVE-2023-4376`	6.4 Medium	Jonatas Souza Villa Flor	Yes
2023-08-16 00:00	wpDataTables - Tables & Table Charts <= 2.1.65 - Authenticated(Administrator+) PHP Object Injection wpDataTables < 2.1.66	`CVE-2023-4314`	6.6 Medium	Jonatas Souza Villa Flor	Yes
2023-08-14 00:00	123.chat <= 1.3.0 - Authenticated(Administrator+) Stored Cross-Site Scripting 123.chat <= 1.3.0	`CVE-2023-4298`	4.4 Medium	Jonatas Souza Villa Flor	Yes

Showing 1–7 of 7 reports