loneferret

loneferret is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #880 of 3,515 contributors. The disclosure was published in 2012.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (100%). The average CVSS score across these disclosures is 6.7, peaking at 7.2. Severity breakdown: 0 critical and 2 high.

The most affected software includes mini-mail-dashboard-widget (1), Postie (1), ThreeWP Email Reflector (1), across 4 distinct plugins, themes and core versions in total.

3 of the 4 disclosed issues have a vendor fix, while 1 remain unpatched.

2012

Critical

High

Medium

Low

Global Rank

#880

of 3,515 researchers

Vulns

Critical0

High2

Medium2

Low0

Affected Assets

4plugins

Avg CVSS

6.7

Average score of vulnerabilities

Researcher Submissions

4 records


2012-08-08 00:00	WP SimpleMail <= 1.0.6 - Cross-Site Scripting WP SimpleMail <= 1.0.6	`CVE-2012-2579`	6.1 Medium	loneferret	No
2012-08-08 00:00	Mini Mail Dashboard Widget < 1.43 - Cross-Site Scripting mini-mail-dashboard-widget < 1.43	`CVE-2012-2583`	7.2 High	loneferret	Yes
2012-08-08 00:00	Postie < 1.4.10 - Cross-Site Scripting Postie <= 1.4.9	`CVE-2012-2580`	7.2 High	loneferret	Yes
2012-08-08 00:00	ThreeWP Email Reflector < 1.16 - Cross-Site Scripting ThreeWP Email Reflector < 1.16	`CVE-2012-2572`	6.1 Medium	loneferret	Yes

Showing 1–4 of 4 reports