Mohammed Ansari

Mohammed Ansari is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #402 of 3,515 contributors. The disclosure was published in 2018.

Their research concentrates on Cross-Site Scripting, which accounts for 8 of their findings (73%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection. The average CVSS score across these disclosures is 6.6, peaking at 8.8. Severity breakdown: 0 critical and 3 high.

The most affected software includes WP Fastest Cache (4), Slideshow Gallery LITE (3), File Manager (2), across 5 distinct plugins, themes and core versions in total.

All 11 disclosed issues have since received a vendor fix. The most severe finding, "WP Fastest Cache <= 0.8.8.5 - Cross-Site Request Forgery via page to wpfastestcacheoptions", scores 8.8 out of 10.

2018

Critical

High

Medium

Low

Global Rank

#402

of 3,515 researchers

Vulns

Critical0

High3

Medium8

Low0

Affected Assets

5plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

11 records


2018-10-09 00:00	WP Fastest Cache <= 0.8.8.5 - Cross-Site Request Forgery via page to wpfastestcacheoptions WP Fastest Cache <= 0.8.8.5	`CVE-2018-17584`	8.8 High	Mohammed Ansari	Yes
2018-10-09 00:00	WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via rules[0][content] parameter WP Fastest Cache <= 0.8.8.5	`CVE-2018-17586`	6.1 Medium	Mohammed Ansari	Yes
2018-10-09 00:00	WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via wpFastestCachePage options, wpFastestCachePreload_number or wpFastestCacheLanguage parameter WP Fastest Cache <= 0.8.8.5	`CVE-2018-17585`	6.1 Medium	Mohammed Ansari	Yes
2018-10-09 00:00	WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via the rules[0][content] parameter in a wpfc_save_exclude_pages action WP Fastest Cache <= 0.8.8.5	`CVE-2018-17583`	6.1 Medium	Mohammed Ansari	Yes
2018-10-04 00:00	Slideshow Gallery <= 1.6.8 - Cross-Site Scripting Slideshow Gallery LITE <= 1.6.8	`CVE-2018-18017`	6.1 Medium	Mohammed Ansari	Yes
2018-10-04 00:00	Slideshow Gallery <= 1.6.8 - SQL Injection Slideshow Gallery LITE <= 1.6.8	`CVE-2018-18018`	7.2 High	Mohammed Ansari	Yes
2018-10-04 00:00	Slideshow Gallery <= 1.6.8 - Cross-Site Scripting Slideshow Gallery LITE <= 1.6.8	`CVE-2018-18019`	6.1 Medium	Mohammed Ansari	Yes
2018-09-17 00:00	File Manager <= 3.0 - Stored Cross-Site Scripting File Manager <= 3.0	`CVE-2018-16967`	6.1 Medium	Mohammed Ansari	Yes
2018-09-17 00:00	File Manager <= 3.0 - Cross-Site Request Forgery File Manager <= 3.0	`CVE-2018-16966`	8.8 High	Mohammed Ansari	Yes
2018-07-27 00:00	Multi Step Form <= 1.2.5 - Stored Cross-Site Scripting Multi Step Form < 1.2.6	`CVE-2018-14846`	6.4 Medium	Mohammed Ansari	Yes

Showing 1–10 of 11 reports