Kyle Sanchez

Kyle Sanchez is a security researcher credited with 20 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #259 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2024, with 16 findings.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 9 of their findings (45%). Other recurring categories include Missing Authorization, Cross-Site Scripting. The average CVSS score across these disclosures is 5.1, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes ProfileGrid (4), WP Ultimate Review (3), Polls CP (2), across 12 distinct plugins, themes and core versions in total.

19 of the 20 disclosed issues have a vendor fix, while 1 remain unpatched.

20232024

Critical

High

Medium

Low

Global Rank

#259

of 3,515 researchers

Vulns

Critical0

High1

Medium19

Low0

Affected Assets

12plugins

Avg CVSS

5.1

Average score of vulnerabilities

Researcher Submissions

20 records


2024-05-06 00:00	WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder <= 3.7.4 - Missing Authorization WP Post Author <= 3.7.4	`CVE-2024-34389`	4.3 Medium	Kyle Sanchez	Yes
2024-05-06 00:00	WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder <= 3.6.4 - Missing Authorization to Rating Manipulation WP Post Author <= 3.6.4	`CVE-2024-34387`	4.3 Medium	Kyle Sanchez	Yes
2024-04-22 00:00	ProfileGrid <= 5.8.2 - Bypass Group Members Limit ProfileGrid <= 5.8.2	`CVE-2024-32774`	5.3 Medium	Kyle Sanchez	Yes
2024-04-22 00:00	Rate My Post – Star Rating Plugin by FeedbackWP <= 3.4.4 - Insecure Direct Object Reference Rate My Post <= 3.4.4	`CVE-2024-32823`	5.3 Medium	Kyle Sanchez	Yes
2024-04-22 00:00	ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference ProfileGrid <= 5.7.9	`CVE-2024-32772`	4.3 Medium	Kyle Sanchez	Yes
2024-04-22 00:00	ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference ProfileGrid <= 5.7.9	`CVE-2024-32808`	4.3 Medium	Kyle Sanchez	Yes
2024-04-17 00:00	Wp Ultimate Review <= 2.2.5 - Unauthenticated Review Restriction Bypass WP Ultimate Review <= 2.2.5	`CVE-2024-32685`	5.3 Medium	Kyle Sanchez	Yes
2024-04-17 00:00	Wp Ultimate Review <= 2.2.5 - Unauthenticated Insecure Direct Object Reference WP Ultimate Review <= 2.2.5	`CVE-2024-32683`	5.3 Medium	Kyle Sanchez	Yes
2024-04-17 00:00	Wp Ultimate Review <= 2.2.5 - Missing Authorization WP Ultimate Review <= 2.2.5	`CVE-2024-32684`	5.3 Medium	Kyle Sanchez	Yes
2024-04-16 00:00	WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Insecure Direct Object Reference WP-Recall <= 16.26.5	`CVE-2024-32604`	4.3 Medium	Kyle Sanchez	Yes

Showing 1–10 of 20 reports