Junsu Yeo

Junsu Yeo is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #808 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2023, with 4 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 1 of their findings (20%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 4.8, peaking at 6.4.

The most affected software includes WOLF (2), CYAN Backup (1), Remove Duplicate Posts (1), across 4 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix.

20232024

Critical

High

Medium

Low

Global Rank

#808

of 3,515 researchers

Vulns

Critical0

High0

Medium5

Low0

Affected Assets

4plugins

Avg CVSS

4.8

Average score of vulnerabilities

Researcher Submissions

5 records


2024-11-11 00:00	CYAN Backup <= 2.5.3 - Authenticated (Admin+) Arbitrary File Download CYAN Backup <= 2.5.3	`CVE-2024-52390`	4.9 Medium	Junsu Yeo	Yes
2023-07-24 00:00	Remove Duplicate Posts <= 1.3.5 - Missing Authorization to Post Deletion Remove Duplicate Posts <= 1.3.5	`CVE-2023-29237`	4.3 Medium	Junsu Yeo	Yes
2023-05-03 00:00	WOLF <= 1.0.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpbe_update_page_field WOLF <= 1.0.6	`CVE-2023-31218`	6.4 Medium	Junsu Yeo	Yes
2023-05-03 00:00	WOLF <= 1.0.6 - Cross-Site Request Forgery via wpbe_update_page_field WOLF <= 1.0.6	`N/A`	4.3 Medium	Junsu Yeo	Yes
2023-03-30 00:00	Zippy <= 1.6.1 - Authenticated (Contributor+) Sensitive Information Disclosure Zippy <= 1.6.1	`CVE-2023-26533`	4.3 Medium	Junsu Yeo	Yes

Showing 1–5 of 5 reports