Lokesh Dachepalli

Lokesh Dachepalli is a security researcher credited with 14 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #350 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2023, with 13 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 9 of their findings (64%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 4.8, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes CPT Shortcode Generator (2), Sunny Search (2), bodi0`s Easy cache (1), across 12 distinct plugins, themes and core versions in total.

3 of the 14 disclosed issues have a vendor fix, while 11 remain unpatched. The most severe finding, "PayGreen – Ancienne version <= 4.10.2 - Cross-Site Request Forgery", scores 8.8 out of 10.

20232024

Critical

High

Medium

Low

Global Rank

#350

of 3,515 researchers

Vulns

Critical0

High1

Medium13

Low0

Affected Assets

12plugins

Avg CVSS

4.8

Average score of vulnerabilities

Researcher Submissions

14 records


2024-12-13 00:00	bodi0’s Easy Cache <= 0.8 - Authenticated (Admin+) Stored Cross-Site Scripting bodi0`s Easy cache <= 0.8	`CVE-2024-12628`	4.4 Medium	Lokesh Dachepalli	Yes
2023-10-12 00:00	CPT Shortcode Generator <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings CPT Shortcode Generator <= 1.0	`CVE-2023-45644`	4.4 Medium	Lokesh Dachepalli	No
2023-10-12 00:00	CPT Shortcode Generator <= 1.0 - Cross-Site Request Forgery CPT Shortcode Generator <= 1.0	`CVE-2023-45643`	4.3 Medium	Lokesh Dachepalli	No
2023-08-29 00:00	Localize Remote Images <= 1.0.9 - Cross-Site Request Forgery via admin menu Localize Remote Images <= 1.0.9	`CVE-2023-41244`	5.3 Medium	Lokesh Dachepalli	No
2023-08-16 00:00	Custom Admin Login Page \| WPZest <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Custom Admin Login Page <= 1.2.0	`CVE-2023-40329`	4.4 Medium	Lokesh Dachepalli	No
2023-07-20 00:00	Gestion-Pymes <= 1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting Gestion-Pymes <= 1.5.6	`CVE-2023-38397`	4.4 Medium	Lokesh Dachepalli	No
2023-05-12 00:00	weebotLite <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings weebotLite <= 1.0.0	`CVE-2023-32596`	4.4 Medium	Lokesh Dachepalli	No
2023-05-12 00:00	Sunny Search <= 1.0.2 - Cross-Site Request Forgery to Settings Update Sunny Search <= 1.0.2	`CVE-2023-32592`	4.3 Medium	Lokesh Dachepalli	No
2023-05-12 00:00	Sunny Search <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings Sunny Search <= 1.0.2	`CVE-2023-32595`	4.4 Medium	Lokesh Dachepalli	No
2023-04-19 00:00	Reservation.Studio widget <= 1.0.11 - Cross-Site Request Forgery via plugin settings Reservation.Studio widget <= 1.0.11	`CVE-2023-25468`	4.3 Medium	Lokesh Dachepalli	Yes

Showing 1–10 of 14 reports