Mahdi.Hidden (Ashiyane Digital Security Team)
Mahdi.Hidden (Ashiyane Digital Security Team) is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,048 of 3,515 contributors. The disclosure was published in 2015.
Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 1 of their findings (33%). Other recurring categories include Cross-Site Scripting, Path Traversal. The average CVSS score across these disclosures is 7.6, peaking at 8.8. Severity breakdown: 0 critical and 2 high.
The most affected software includes Avenir-soft Direct Download (1), Contact Form Email (1), Simple Backup (1), across 3 distinct plugins, themes and core versions in total.
2 of the 3 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Contact Form Email <= 1.3.11 - Cross-Site Request Forgery to Cross-Site Scripting", scores 8.8 out of 10.
#1048
of 3,515 researchers
3
3
7.6
Average score of vulnerabilities
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C