Jouko Pynnöne

Jouko Pynnöne is a security researcher credited with 22 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #235 of 3,515 contributors. Their disclosures were published between 2015 and 2017. The most productive year was 2016, with 10 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 12 of their findings (55%). Other recurring categories include Cross-Site Request Forgery (CSRF), Improper Access Control. The average CVSS score across these disclosures is 7.4, peaking at 9.8. Severity breakdown: 2 critical and 12 high.

The most affected software includes Formidable Forms (4), WPML Multilingual CMS (3), Fluid Responsive Slideshow (2), across 12 distinct plugins, themes and core versions in total.

21 of the 22 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "OneLogin SAML-SSO Plugin < 2.1.6 - Authentication Bypass", scores 9.8 out of 10.

201520162017

Critical

High

Medium

Low

Global Rank

#235

of 3,515 researchers

Vulns

Critical2

High12

Medium8

Low0

Affected Assets

9plugins1theme2core versions

Avg CVSS

7.4

Average score of vulnerabilities

Researcher Submissions

22 records


2017-11-13 00:00	Formidable Form Builder < 2.05.03 - SQL Injection Formidable Forms < 2.05.03	`N/A`	8.6 High	Jouko Pynnöne	Yes
2017-11-13 00:00	Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting Formidable Forms < 2.05.03	`CVE-2017-20192`	8.3 High	Jouko Pynnöne	Yes
2017-11-13 00:00	Formidable Form Builder < 2.05.03 - Reflected Cross-Site Scripting Formidable Forms < 2.05.03	`N/A`	6.1 Medium	Jouko Pynnöne	Yes
2017-11-12 00:00	Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure Formidable Forms < 2.05.03	`CVE-2017-20194`	5.3 Medium	Jouko Pynnöne	Yes
2016-11-23 00:00	Platform 4 <= 1.1.4 - Cross-Site Request Forgery Platform <= 1.1.4	`CVE-2016-10945`	8.8 High	Jouko Pynnöne	No
2016-10-31 00:00	W3 Total Cache <= 0.9.4 - Server-Side Request Forgery leading to Host Information Disclosure W3 Total Cache <= 0.9.4	`N/A`	8.6 High	Jouko Pynnöne	Yes
2016-07-20 00:00	Lazy Load < 0.6.1 - Authenticated Stored Cross-Site Scripting Lazy Load < 0.6.1	`N/A`	7.4 High	Jouko Pynnöne	Yes
2016-06-18 00:00	WordPress Core < 4.5.3 - Cross-Site Scripting via Attachment Name #2 WordPress 4.5 3.7 – 4.5.2 · 10 branches	`CVE-2016-5833`	6.4 Medium	Divyesh Prajapati	Yes
2016-06-18 00:00	WordPress Core < 4.5.3 - Cross-Site Scripting via Attachment Name WordPress 4.5 3.7 – 4.5.2 · 10 branches	`CVE-2016-5834`	6.4 Medium	Divyesh Prajapati	Yes
2016-06-06 00:00	OneLogin SAML-SSO Plugin < 2.1.6 - Authentication Bypass OneLogin SAML SSO < 2.1.6	`N/A`	9.8 Critical	Jouko Pynnöne	Yes

Showing 1–10 of 22 reports