kauenavarro

kauenavarro is a security researcher credited with 7 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #599 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2024, with 6 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 7 of their findings (100%). The average CVSS score across these disclosures is 6.1, peaking at 6.1.

The most affected software includes Wp EMember (2), EventON (Pro) - WordPress Virtual… (1), Events Manager (1), across 6 distinct plugins, themes and core versions in total.

All 7 disclosed issues have since received a vendor fix.

20232024

Critical

High

Medium

Low

Global Rank

#599

of 3,515 researchers

Vulns

Critical0

High0

Medium7

Low0

Affected Assets

5plugins1theme

Avg CVSS

6.1

Average score of vulnerabilities

Researcher Submissions

7 records


2024-09-18 00:00	MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting MC4WP 4.9.9 – 4.9.16	`CVE-2024-8850`	6.1 Medium	kauenavarro	Yes
2024-08-20 00:00	Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parameters Phlox PRO <= 5.16.4	`CVE-2024-6339`	6.1 Medium	kauenavarro	Yes
2024-06-28 00:00	Events Manager <= 6.4.8 - Reflected Cross-Site Scripting Events Manager <= 6.4.8	`CVE-2024-5889`	6.1 Medium	kauenavarro	Yes
2024-06-22 00:00	WP eMember <= 10.6.5 - Reflected Cross-Site Scripting via 'login_pwd' Wp EMember <= 10.6.5	`CVE-2024-5074`	6.1 Medium	kauenavarro	Yes
2024-05-14 00:00	WP eMember <= 10.3.8 - Reflected Cross-Site Scripting via 'fieldId' Wp EMember <= 10.3.8	`CVE-2024-4749`	6.1 Medium	kauenavarro	Yes
2024-01-31 00:00	EventON <= 4.4.0 - Reflected Cross-Site Scripting EventON (Pro) - WordPress Virtual… <= 4.4.0	`CVE-2023-7200`	6.1 Medium	kauenavarro	Yes
2023-12-29 00:00	RSVP Events <= 2.9.4 - Reflected Cross-Site Scripting RSVP Events <= 2.9.4	`CVE-2023-7170`	6.1 Medium	kauenavarro	Yes

Showing 1–7 of 7 reports