Matt Barry

Matt Barry is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #427 of 3,515 contributors. Their disclosures were published between 2014 and 2020. The most productive year was 2017, with 4 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (20%). Other recurring categories include Deserialization Of Untrusted Data, Authentication Bypass Using An Alternate Path Or Channel. The average CVSS score across these disclosures is 8.7, peaking at 9.8. Severity breakdown: 5 critical and 4 high.

The most affected software includes Appointments (1), Autoptimize (1), Captcha (1), across 10 distinct plugins, themes and core versions in total.

All 10 disclosed issues have since received a vendor fix. The most severe finding, "Manage WP Worker <= 4.9.2 - Authentication Bypass", scores 9.8 out of 10.

2014201520162017201820192020

Critical

High

Medium

Low

Global Rank

#427

of 3,515 researchers

Vulns

Critical5

High4

Medium1

Low0

Affected Assets

9plugins1core version

Avg CVSS

8.7

Average score of vulnerabilities

Researcher Submissions

10 records


2020-02-11 00:00	Manage WP Worker <= 4.9.2 - Authentication Bypass ManageWP Worker <= 4.9.2	`N/A`	9.8 Critical	Matt Barry	Yes
2019-11-13 00:00	Email Subscribers & Newsletters < 4.3.1 - Unauthenticated Blind SQL Injection Email Subscribers & Newsletters <= 4.3.0	`CVE-2019-20361`	8.3 High	Matt Barry	Yes
2019-10-21 00:00	SyntaxHighlighter Evolved < 3.5.1 - Stored Cross-Site Scripting SyntaxHighlighter Evolved < 3.5.1	`N/A`	7.2 High	Matt Barry	Yes
2019-09-26 00:00	GiveWP <= 2.5.4 - Authorization Bypass GiveWP <= 2.5.4	`CVE-2019-20360`	7.5 High	Matt Barry	Yes
2018-07-05 00:00	WordPress Core < 4.9.7 - Authenticated Arbitrary File Deletion WordPress 4.9 3.7 – 4.9.6 · 14 branches	`CVE-2018-12895`	8.8 High	Matt Barry	Yes
2017-12-19 00:00	Captcha 4.3.6 - 4.4.4 - Plugin Backdoor Captcha 4.3.6 – 4.4.4	`N/A`	9.6 Critical	Matt Barry	Yes
2017-10-02 00:00	Appointments <= 2.2.1 - Unauthenticated PHP Object Injection Appointments < 2.2.2	`CVE-2017-20206`	9.8 Critical	Matt Barry	Yes
2017-10-02 00:00	Flickr Gallery <= 1.5.2 - Unauthenticated PHP Object Injection Flickr Gallery < 1.5.3	`CVE-2017-20207`	9.8 Critical	Matt Barry	Yes
2017-06-19 00:00	Autoptimize <= 2.1.0 - Unauthenticated Local File Inclusion Autoptimize <= 2.1.0	`N/A`	9.8 Critical	Matt Barry	Yes
2014-10-01 00:00	Subscribe2 – Form, Email Subscribers & Newsletters <= 10.15 - Stored Cross-Site Scripting Subscribe2 < 10.16	`CVE-2014-6604`	6.1 Medium	Matt Barry	Yes

Showing 1–10 of 10 reports