lttn

lttn is a security researcher credited with 7 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #607 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2023, with 6 findings.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 2 of their findings (29%). Other recurring categories include Cross-Site Scripting, Missing Authorization. The average CVSS score across these disclosures is 5.9, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Project Manager (2), Atarim (1), LearnPress (1), across 6 distinct plugins, themes and core versions in total.

All 7 disclosed issues have since received a vendor fix.

20232024

Critical

High

Medium

Low

Global Rank

#607

of 3,515 researchers

Vulns

Critical0

High1

Medium6

Low0

Affected Assets

6plugins

Avg CVSS

5.9

Average score of vulnerabilities

Researcher Submissions

7 records


2024-01-02 00:00	LearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information Disclosure LearnPress <= 4.2.5.7	`CVE-2023-6223`	4.3 Medium	lttn	Yes
2023-12-07 00:00	WP Project Manager <= 2.6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting Project Manager <= 2.6.8	`CVE-2023-49860`	6.4 Medium	lttn	Yes
2023-12-07 00:00	WP Project Manager <= 2.6.7 - Missing Authorization Project Manager <= 2.6.7	`CVE-2023-40003`	5.3 Medium	lttn	Yes
2023-12-05 00:00	RegistrationMagic <= 5.2.3.0 - Missing Authorization RegistrationMagic <= 5.2.3.0	`CVE-2023-49831`	5.3 Medium	lttn	Yes
2023-11-23 00:00	Salon booking system < 8.7 - Authenticated (Editor+) Privilege Escalation Salon Booking System < 8.7	`CVE-2023-48319`	7.2 High	lttn	Yes
2023-11-07 00:00	Atarim <= 3.12 - Unauthenticated Cross-Site Scripting Atarim <= 3.12	`CVE-2023-47544`	6.1 Medium	lttn	Yes
2023-11-03 00:00	Youzify <= 1.2.2 - Insecure Direct Object Reference Youzify <= 1.2.2	`CVE-2023-47191`	6.5 Medium	lttn	Yes

Showing 1–7 of 7 reports