Mariam Tariq

Mariam Tariq is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #538 of 3,515 contributors. The disclosure was published in 2022.

Their research concentrates on Cross-Site Scripting, which accounts for 6 of their findings (75%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.3, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Coru LFMember (1), GetYourGuide Ticketing (1), Highlight Focus (1), across 8 distinct plugins, themes and core versions in total.

3 of the 8 disclosed issues have a vendor fix, while 5 remain unpatched. The most severe finding, "Coru LFMember <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting", scores 8.8 out of 10.

2022

Critical

High

Medium

Low

Global Rank

#538

of 3,515 researchers

Vulns

Critical0

High2

Medium6

Low0

Affected Assets

8plugins

Avg CVSS

6.3

Average score of vulnerabilities

Researcher Submissions

8 records


2022-11-02 00:00	Jeeng Push Notifications <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting Jeeng Push Notifications <= 2.0.3	`CVE-2022-3610`	5.5 Medium	Mariam Tariq	Yes
2022-10-13 00:00	Highlight Focus <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Highlight Focus <= 1.1	`CVE-2022-3462`	5.5 Medium	Mariam Tariq	No
2022-09-18 00:00	GetYourGuide Ticketing <= 1.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting GetYourGuide Ticketing <= 1.0.2	`CVE-2022-3609`	5.5 Medium	Mariam Tariq	Yes
2022-06-27 00:00	Simple Page Transition <= 1.4.1 - Stored Cross Site Scripting Simple Page Transition <= 1.4.1	`CVE-2022-2341`	6.1 Medium	Mariam Tariq	No
2022-06-27 00:00	W-DALIL <= 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting W-DALIL <= 2.0	`CVE-2022-2340`	4.8 Medium	Mariam Tariq	No
2022-04-27 00:00	Coru LFMember <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting Coru LFMember <= 1.0.2	`CVE-2022-1618`	8.8 High	Mariam Tariq	No
2022-04-27 00:00	WP-Invoice – Web Invoice and Billing <= 4.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting WP-Invoice <= 4.3.1	`CVE-2022-1617`	8.8 High	Mariam Tariq	Yes
2022-04-25 00:00	ScrollReveal.js Effects <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting ScrollReveal.js Effects <= 1.2	`CVE-2022-1512`	5.5 Medium	Mariam Tariq	No

Showing 1–8 of 8 reports