Kenneth Jepsen

Kenneth Jepsen is a security researcher credited with 26 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #203 of 3,515 contributors. Their disclosures were published between 2014 and 2015. The most productive year was 2015, with 14 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 19 of their findings (73%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.9, peaking at 8.8. Severity breakdown: 0 critical and 11 high.

The most affected software includes Timed Popup WordPress Plugin (2), acobot (1), Admin Pack by SITE CASEIRO (1), across 25 distinct plugins, themes and core versions in total.

14 of the 26 disclosed issues have a vendor fix, while 12 remain unpatched. The most severe finding, "WP Accurate Form Data <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting", scores 8.8 out of 10.

20142015

Critical

High

Medium

Low

Global Rank

#203

of 3,515 researchers

Vulns

Critical0

High11

Medium15

Low0

Affected Assets

25plugins

Avg CVSS

6.9

Average score of vulnerabilities

Researcher Submissions

26 records


2015-08-04 00:00	Ninja Forms Contact Form <= 2.9.21 - Reflected Cross-Site Scripting Ninja Forms <= 2.9.21	`N/A`	5.4 Medium	Kenneth Jepsen	Yes
2015-07-30 00:00	Content Grabber <= 1.0 - Authenticated (Admin+) Cross-Site Scripting Content Grabber <= 1.0	`CVE-2015-9469`	5.5 Medium	Kenneth Jepsen	No
2015-07-30 00:00	Database Sync < 0.5 - Reflected Cross-Site Scripting Database Sync < 0.5	`N/A`	6.1 Medium	Kenneth Jepsen	Yes
2015-07-30 00:00	Admin Pack by SITE CASEIRO <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting Admin Pack by SITE CASEIRO <= 1.1	`N/A`	5.5 Medium	Kenneth Jepsen	No
2015-06-21 00:00	WP Accurate Form Data <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting WP Accurate Form Data <= 1.2	`CVE-2015-9443`	8.8 High	Kenneth Jepsen	No
2015-06-16 00:00	Copy or Move Comments < 1.0.1 - Cross-Site Scripting and SQL Injection Copy or Move Comments < 1.0.1	`N/A`	8.8 High	Kenneth Jepsen	Yes
2015-06-15 00:00	Altos Connect <= 1.3.0 - Cross-Site Scripting Altos Connect <= 1.3.0	`CVE-2015-9444`	6.1 Medium	Kenneth Jepsen	No
2015-02-11 00:00	Mobile Domain <= 1.5.2 - Cross-Site Request Forgery and Stored Cross-Site Scripting Mobile Domain <= 1.5.2	`CVE-2015-1581`	6.1 Medium	Kenneth Jepsen	No
2015-02-09 00:00	CrossSlide jQuery Plugin <= 2.0.5 - Multiple Cross-Site Request Forgery to Stored Cross-Site Scripting Cross Slide <= 2.0.5	`CVE-2015-2089`	8.8 High	Kenneth Jepsen	No
2015-02-09 00:00	Redirection Page <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting Redirection Page <= 1.2	`CVE-2015-1580`	8.8 High	Kenneth Jepsen	No

Showing 1–10 of 26 reports