lucy

lucy is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #547 of 3,515 contributors. The disclosure was published in 2022.

Their research concentrates on Cross-Site Scripting, which accounts for 5 of their findings (63%). Other recurring categories include Path Traversal, SQL Injection. The average CVSS score across these disclosures is 6.0, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Team Members (2), WP All Import (2), Advanced WP Columns (1), across 6 distinct plugins, themes and core versions in total.

7 of the 8 disclosed issues have a vendor fix, while 1 remain unpatched.

2022

Critical

High

Medium

Low

Global Rank

#547

of 3,515 researchers

Vulns

Critical0

High1

Medium7

Low0

Affected Assets

6plugins

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

8 records


2022-12-09 00:00	Team Members <= 5.2.0 - Authenticated (Editor+) Stored Cross-Site Scripting Team Members <= 5.2.0	`CVE-2022-3936`	5.5 Medium	lucy	Yes
2022-11-10 00:00	Advanced WP Columns <= 2.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting Advanced WP Columns <= 2.0.6	`CVE-2022-3426`	5.5 Medium	lucy	No
2022-10-17 00:00	Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload WP All Import <= 3.6.8	`CVE-2022-3418`	6.5 Medium	lucy	Yes
2022-10-17 00:00	Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload via Path Traversal WP All Import <= 3.6.8	`CVE-2022-2711`	6.5 Medium	lucy	Yes
2022-10-06 00:00	WP Word Count <= 3.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Word Count <= 3.2.3	`CVE-2022-3408`	5.5 Medium	lucy	Yes
2022-09-26 00:00	Tutor LMS <= 2.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting Tutor LMS <= 2.0.9	`CVE-2022-2563`	5.5 Medium	lucy	Yes
2022-05-30 00:00	Better Find and Replace <= 1.3.5 - Admin+ SQL Injection Better Find and Replace < 1.3.6	`CVE-2022-1472`	7.2 High	lucy	Yes
2022-05-09 00:00	Team Members <= 5.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting Team Members <= 5.1.0	`CVE-2022-1568`	5.5 Medium	lucy	Yes

Showing 1–8 of 8 reports