Mikey Veenstra

Mikey Veenstra is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #391 of 3,515 contributors. Their disclosures were published between 2019 and 2020. The most productive year was 2019, with 8 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (27%). Other recurring categories include Hidden Functionality, Improper Privilege Management. The average CVSS score across these disclosures is 8.4, peaking at 9.8. Severity breakdown: 5 critical and 4 high.

The most affected software includes WP Cost Estimation & Payment Forms… (2), 10Web Map Builder for Google Maps (1), Async JavaScript (1), across 10 distinct plugins, themes and core versions in total.

All 11 disclosed issues have since received a vendor fix. The most severe finding, "Profile Builder <= 3.1.0 - Privilege Escalation", scores 9.8 out of 10.

20192020

Critical

High

Medium

Low

Global Rank

#391

of 3,515 researchers

Vulns

Critical5

High4

Medium2

Low0

Affected Assets

12plugins1theme

Avg CVSS

8.4

Average score of vulnerabilities

Researcher Submissions

11 records


2020-02-27 00:00	10WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change 10Web Map Builder for Google Maps < 1.0.64	`CVE-2020-36853`	7.2 High	Mikey Veenstra	Yes
2020-02-27 00:00	Async JavaScript <= 2.19.07.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting Async JavaScript < 2.20.02.27	`CVE-2020-36854`	6.4 Medium	Mikey Veenstra	Yes
2020-02-13 00:00	Profile Builder <= 3.1.0 - Privilege Escalation Profile Builder Pro < 3.1.1	`N/A`	9.8 Critical	Mikey Veenstra	Yes
2019-10-21 00:00	Bridge Theme <= 18.2, Qode Instagram Widget <=2.0.1, Qode Twitter Feed <= 2.0.0 - Open Redirect Bridge - Creative Multipurpose… < 18.2.1	`N/A`	7.1 High	Mikey Veenstra	Yes
2019-09-24 00:00	Rich Reviews <= 1.7.4 - Stored Cross-Site Scripting Rich Reviews by Starfish <= 1.7.4	`CVE-2019-25216`	7.2 High	Mikey Veenstra	Yes
2019-05-29 00:00	ConvertPlug <= 3.4.2 - Unauthenticated Administrator Creation ConvertPlus < 3.4.3	`N/A`	9.8 Critical	Mikey Veenstra	Yes
2019-05-28 00:00	Slick Popup <= 1.7.1 - Privilege Escalation Slick Popup < 1.7.2	`CVE-2019-15867`	8.8 High	Mikey Veenstra	Yes
2019-03-29 00:00	Pipdig Power Pack (P3) <= 4.7.3 - Backdoor Pipdig Power Pack (P3) <= 4.7.3	`N/A`	9.8 Critical	Mikey Veenstra	Yes
2019-02-14 00:00	WP Cost Estimation < 9.660 - Upload Directory Traversal WP Cost Estimation & Payment Forms… < 9.660	`CVE-2019-25295`	6.5 Medium	Mikey Veenstra	Yes
2019-02-14 00:00	WP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/Delete WP Cost Estimation & Payment Forms… < 9.644	`CVE-2019-25296`	9.8 Critical	Mikey Veenstra	Yes

Showing 1–10 of 11 reports