Luan Pedersini

Luan Pedersini is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #537 of 3,515 contributors. Their disclosures were published between 2020 and 2022. The most productive year was 2022, with 7 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (38%). Other recurring categories include Server-Side Request Forgery (SSRF), Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 6.4, peaking at 8.8. Severity breakdown: 0 critical and 3 high.

The most affected software includes Allow svg files (2), Easy SVG Support (1), Enable SVG (1), across 7 distinct plugins, themes and core versions in total.

6 of the 8 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/Deletion", scores 8.8 out of 10.

202020212022

Critical

High

Medium

Low

Global Rank

#537

of 3,515 researchers

Vulns

Critical0

High3

Medium5

Low0

Affected Assets

7plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

8 records


2022-07-04 00:00	Allow SVG Files <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting Allow svg files <= 1.1	`CVE-2022-2299`	6.4 Medium	Luan Pedersini	No
2022-06-02 00:00	WP Ultimate CSV Importer <= 6.5.2 - Server-Side Request Forgery WP Ultimate CSV Importer <= 6.5.2	`CVE-2022-1977`	4.1 Medium	Luan Pedersini	Yes
2022-06-01 00:00	Easy SVG Support <= 3.2.0 - Cross-Site Scripting via SVG Upload Easy SVG Support <= 3.2.0	`CVE-2022-1964`	5.4 Medium	Luan Pedersini	Yes
2022-05-03 00:00	Enable SVG <= 1.3.1 - Cross-Site Scripting via SVG Enable SVG <= 1.3.1	`CVE-2022-1562`	5.4 Medium	Luan Pedersini	Yes
2022-04-19 00:00	External Media without Import <= 1.1.2 - Authenticated (Subscriber+) Blind Server-Side Request Forgery External Media without Import <= 1.1.2	`CVE-2022-1398`	6.4 Medium	Luan Pedersini	No
2022-04-14 00:00	EXMAGE – WordPress Image Links <= 1.0.6 - Admin+ Blind SSRF EXMAGE <= 1.0.6	`CVE-2022-1037`	7.2 High	Luan Pedersini	Yes
2022-03-14 00:00	Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/Deletion File Manager <= 5.2.2	`CVE-2022-0403`	8.8 High	Luan Pedersini	Yes
2020-05-30 00:00	Allow SVG Files <= 1.0 - Authenticated (Admin+) Arbitrary File Upload Allow svg files < 1.1	`CVE-2022-1939`	7.2 High	Luan Pedersini	Yes

Showing 1–8 of 8 reports