Manideep K

Manideep K is a security researcher credited with 19 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #264 of 3,515 contributors. Their disclosures were published between 2014 and 2015. The most productive year was 2014, with 18 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 15 of their findings (79%). Other recurring categories include Cross-Site Scripting. The average CVSS score across these disclosures is 7.5, peaking at 8.8. Severity breakdown: 0 critical and 10 high.

The most affected software includes bird-feeder (1), DandyID Services (1), gSlideShow (1), across 19 distinct plugins, themes and core versions in total.

None of the 19 disclosed issues have a published fix yet. The most severe finding, "PWGRandom <= 1.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting", scores 8.8 out of 10.

20142015

Critical

High

Medium

Low

Global Rank

#264

of 3,515 researchers

Vulns

Critical0

High10

Medium9

Low0

Affected Assets

19plugins

Avg CVSS

7.5

Average score of vulnerabilities

Researcher Submissions

19 records


2015-01-03 00:00	SimpleFlickr <= 3.0.3 - Cross-Site Request Forgery to Cross-Site Scripting simpleflickr <= 3.0.3	`CVE-2014-9396`	6.1 Medium	Manideep K	No
2014-12-18 00:00	PictoBrowser Gallery <= 0.3.1 - Cross-Site Request Forgery PictoBrowser <= 0.3.1	`CVE-2014-9392`	6.1 Medium	Manideep K	No
2014-12-18 00:00	PWGRandom <= 1.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting PWGRandom <= 1.11	`CVE-2014-9394`	8.8 High	Manideep K	No
2014-12-18 00:00	WP Limit Posts Automatically <= 0.7 - Cross-Site Request Forgery leading to Cross-Site Scripting wp-limit-posts-automatically <= 0.7	`CVE-2014-9401`	8.8 High	Manideep K	No
2014-12-18 00:00	WP Unique Article Header Image <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting wp-unique-article-header-image <= 1.0	`CVE-2014-9400`	8.8 High	Manideep K	No
2014-12-18 00:00	Post to Twitter <= 0.7 - Cross-Site Request Forgery to Cross-Site Scripting Post to Twitter <= 0.7	`CVE-2014-9393`	8.8 High	Manideep K	No
2014-12-18 00:00	gSlideShow <= 0.1 - Cross-Site Request Forgery gSlideShow <= 0.1	`CVE-2014-9391`	8.8 High	Manideep K	No
2014-12-14 00:00	wpCommentTwit Plugin <= 0.5 - Cross-Site Scripting wpCommentTwit <= 0.5	`CVE-2014-9340`	6.1 Medium	Manideep K	No
2014-12-14 00:00	DandyID Services <= 1.5.9 - Cross-Site Request Forgery DandyID Services <= 1.5.9	`CVE-2014-9335`	6.1 Medium	Manideep K	No
2014-12-14 00:00	Mikiurl Wordpress Eklentisi <= 2.0 - Cross-Site Scripting Mikiurl Wordpress Eklentisi <= 2.0	`CVE-2014-9337`	6.1 Medium	Manideep K	No

Showing 1–10 of 19 reports