Michael Helwig

Michael Helwig is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #998 of 3,515 contributors. The disclosure was published in 2016.

Their research concentrates on Cross-Site Scripting, which accounts for 1 of their findings (33%). Other recurring categories include Deserialization Of Untrusted Data, SQL Injection. The average CVSS score across these disclosures is 8.9, peaking at 9.8. Severity breakdown: 2 critical and 1 high.

The most affected software includes Event Registration (3), across 1 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix. The most severe finding, "Event Registration <= 6.02.02 - PHP Object Injection", scores 9.8 out of 10.

2016

Critical

High

Medium

Low

Global Rank

#998

of 3,515 researchers

Vulns

Critical2

High1

Medium0

Low0

Affected Assets

1plugin

Avg CVSS

8.9

Average score of vulnerabilities

Researcher Submissions

3 records


2016-05-09 00:00	Event Registration <= 6.02.02 - PHP Object Injection Event Registration <= 6.02.02	`N/A`	9.8 Critical	Michael Helwig	Yes
2016-05-09 00:00	Event Registration <= 6.02.02 - SQL Injection Event Registration <= 6.02.02	`N/A`	9.8 Critical	Michael Helwig	Yes
2016-05-09 00:00	Event Registration <= 6.02.02 - Unauthenticated Stored Cross-Site Scripting Event Registration <= 6.02.02	`N/A`	7.2 High	Michael Helwig	Yes

Showing 1–3 of 3 reports