Justiice

Justiice is a security researcher credited with 21 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #248 of 3,515 contributors. Their disclosures were published between 2022 and 2023. The most productive year was 2023, with 19 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 11 of their findings (52%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization. The average CVSS score across these disclosures is 4.9, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes Affiliate Links (1), Ajax Pagination and Infinite Scroll (1), AJAX Thumbnail Rebuild (1), across 21 distinct plugins, themes and core versions in total.

15 of the 21 disclosed issues have a vendor fix, while 6 remain unpatched. The most severe finding, "Spiffy Calendar <= 4.9.1 - Authenticated (Contributor+) SQL Injection", scores 8.8 out of 10.

20222023

Critical

High

Medium

Low

Global Rank

#248

of 3,515 researchers

Vulns

Critical0

High1

Medium19

Low1

Affected Assets

21plugins

Avg CVSS

4.9

Average score of vulnerabilities

Researcher Submissions

21 records


2023-06-27 00:00	Duplicate Post Page Menu & Custom Post Type <= 2.3.1 - Missing Authorization Duplicate Post Page Menu & Custom Post… <= 2.3.1	`CVE-2023-36526`	4.3 Medium	Justiice	Yes
2023-05-31 00:00	Ajax Pagination and Infinite Scroll <= 2.0.1 - Cross-Site Request Forgery Ajax Pagination and Infinite Scroll <= 2.0.1	`CVE-2023-34033`	4.3 Medium	Justiice	No
2023-05-12 00:00	Quick Page/Post Redirect <= 5.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings Quick Page/Post Redirect Plugin <= 5.2.3	`CVE-2023-25063`	4.4 Medium	Justiice	Yes
2023-05-09 00:00	Wise Chat <= 3.1.3 - Cross-Site Request Forgery Wise Chat <= 3.1.3	`CVE-2023-32504`	4.3 Medium	Justiice	Yes
2023-04-28 00:00	AJAX Thumbnail Rebuild <= 1.13 - Missing Authorization AJAX Thumbnail Rebuild <= 1.13	`CVE-2022-47604`	4.3 Medium	Justiice	Yes
2023-04-28 00:00	WP-CORS <= 0.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting WP-CORS <= 0.2.1	`CVE-2022-47606`	4.4 Medium	Justiice	Yes
2023-04-28 00:00	WP Search Analytics <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting Search Analytics for WP <= 1.4.5	`CVE-2022-47587`	4.4 Medium	Justiice	Yes
2023-04-19 00:00	Login Page Styler <= 6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting Login Page Styler <= 6.2	`CVE-2022-46861`	4.4 Medium	Justiice	Yes
2023-04-19 00:00	Continuous announcement scroller <= 13.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings Continuous announcement scroller <= 13.0	`CVE-2022-46819`	4.4 Medium	Justiice	No
2023-04-19 00:00	Flyzoo Chat <= 2.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Flyzoo Chat <= 2.3.3	`CVE-2022-46817`	4.4 Medium	Justiice	No

Showing 1–10 of 21 reports