Kunal Sharma

Kunal Sharma is a security researcher credited with 44 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #138 of 3,515 contributors. Their disclosures were published between 2022 and 2024. The most productive year was 2022, with 38 findings.

Their research concentrates on SQL Injection, which accounts for 42 of their findings (95%). Other recurring categories include Cross-Site Scripting. The average CVSS score across these disclosures is 7.5, peaking at 9.8. Severity breakdown: 3 critical and 37 high.

The most affected software includes Contest Gallery (16), LetsRecover (3), WP RSS By Publishers (3), across 21 distinct plugins, themes and core versions in total.

31 of the 44 disclosed issues have a vendor fix, while 13 remain unpatched. The most severe finding, "10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters", scores 9.8 out of 10.

202220232024

Critical

High

Medium

Low

Global Rank

#138

of 3,515 researchers

Vulns

Critical3

High37

Medium4

Low0

Affected Assets

21plugins

Avg CVSS

7.5

Average score of vulnerabilities

Researcher Submissions

44 records


2024-02-29 00:00	AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth By AWeber <= 7.3.14 - Authenticated (Admin+) SQL Injection AWeber <= 7.3.14	`CVE-2024-1793`	7.2 High	Kunal Sharma	Yes
2023-03-27 00:00	WC Fields Factory <= 4.1.5 - Authenticated (Administrator+) SQL Injection WC Fields Factory <= 4.1.5	`CVE-2023-0277`	7.2 High	Kunal Sharma	Yes
2023-02-20 00:00	10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters 10Web Map Builder for Google Maps <= 1.0.72	`CVE-2023-0037`	9.8 Critical	Kunal Sharma	Yes
2023-02-16 00:00	Media Library Assistant <= 3.05 - Authenticated (Administrator+) SQL Injection Media Library Assistant <= 3.05	`CVE-2023-0279`	7.2 High	Kunal Sharma	Yes
2023-01-31 00:00	GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection GeoDirectory <= 2.2.23	`CVE-2023-0278`	7.2 High	Kunal Sharma	Yes
2023-01-19 00:00	Mapwiz <= 1.0.1 - Authenticated (Admin+) SQL Injection Mapwiz <= 1.0.1	`CVE-2022-4546`	7.2 High	Kunal Sharma	No
2022-12-24 00:00	Conditional Payment Methods for WooCommerce <= 1.0 - Authenticated (Admin+) SQL Injection Conditional Payment Methods… <= 1.0	`CVE-2022-4547`	7.2 High	Kunal Sharma	No
2022-12-12 00:00	LetsRecover <= 1.1.0 - Unauthenticated SQL Injection via AJAX action LetsRecover <= 1.1.0	`CVE-2022-4357`	9.8 Critical	Kunal Sharma	Yes
2022-12-12 00:00	Quote-O-Matic <= 1.0.5 - Authenticated (Administrator+) SQL Injection Quote-O-Matic <= 1.0.5	`CVE-2022-4373`	7.2 High	Kunal Sharma	No
2022-12-12 00:00	multimedial images <= 1.0b - Authenticated (Administrator+) SQL Injection multimedial images <= 1.0b	`CVE-2022-4370`	7.2 High	Kunal Sharma	No

Showing 1–10 of 44 reports