Kaustubh G. Padwad

Kaustubh G. Padwad is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #403 of 3,515 contributors. The disclosure was published in 2015.

Their research concentrates on Cross-Site Scripting, which accounts for 8 of their findings (73%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.6, peaking at 8.8. Severity breakdown: 0 critical and 4 high.

The most affected software includes Affiliate Ads for cbAds.com (2), AB Google Map Travel (AB-MAP) (1), Ad Buttons (1), across 10 distinct plugins, themes and core versions in total.

9 of the 11 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "ClickBank Affiliate Ads < 1.31 - Cross-Site Request Forgery to Stored Cross-Site Scripting", scores 8.8 out of 10.

2015

Critical

High

Medium

Low

Global Rank

#403

of 3,515 researchers

Vulns

Critical0

High4

Medium7

Low0

Affected Assets

10plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

11 records


2015-05-08 00:00	Ad Buttons <= 2.3.1 - Cross-Site Request Forgery to Cross-Site Scripting Ad Buttons < 2.3.2	`CVE-2017-18553`	6.1 Medium	Kaustubh G. Padwad	Yes
2015-05-07 00:00	Embed Articles <= 7.0.3 - Reflected Cross-Site Scripting embed-articles <= 7.0.3	`N/A`	6.1 Medium	Kaustubh G. Padwad	No
2015-05-07 00:00	Ultimate Profile Builder < 3.0 - Cross-Site Request Forgery to Cross-Site Scripting Ultimate Profile Builder < 3.0	`N/A`	7.1 High	Kaustubh G. Padwad	Yes
2015-05-06 00:00	ClickBank Affiliate Ads <= 1.20 - Cross-Site Scripting Affiliate Ads for cbAds.com <= 1.20	`CVE-2015-20106`	4.8 Medium	Kaustubh G. Padwad	Yes
2015-05-06 00:00	ClickBank Affiliate Ads < 1.31 - Cross-Site Request Forgery to Stored Cross-Site Scripting Affiliate Ads for cbAds.com < 1.31	`CVE-2015-20105`	8.8 High	Kaustubh G. Padwad	Yes
2015-05-02 00:00	Ad Inserter – Ad Manager & AdSense Ads < 1.5.3 - Cross-Site Request Forgery to Cross-Site Scripting Ad Inserter < 1.5.3	`CVE-2015-9497`	8.8 High	Kaustubh G. Padwad	Yes
2015-04-15 00:00	WP Statistics < 9.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting WP Statistics < 9.1.3	`N/A`	5.5 Medium	Kaustubh G. Padwad	Yes
2015-03-23 00:00	AB Google Map Travel (AB-MAP) < 4.0 - Cross-Site Request Forgery to Cross-Site Scripting AB Google Map Travel (AB-MAP) < 4.0	`CVE-2015-2755`	8.8 High	Kaustubh G. Padwad	Yes
2015-03-06 00:00	MonsterInsights – Google Analytics Dashboard for WordPress <= 5.3.2 - Authenticated Stored Cross-Site Scripting MonsterInsights <= 5.3.2	`N/A`	5.5 Medium	Rohit Kumar	Yes
2015-02-21 00:00	AdPlugg WordPress Ad Plugin < 1.1.34 - Cross-Site Scripting AdPlugg WordPress Ad Plugin < 1.1.34	`N/A`	5.5 Medium	Kaustubh G. Padwad	Yes

Showing 1–10 of 11 reports