n0paew

n0paew is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,124 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (100%). The average CVSS score across these disclosures is 6.4, peaking at 6.4.

The most affected software includes Embed Any Document (1), Greenshift (1), Media Library Assistant (1), across 3 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix.

2023

Critical

High

Medium

Low

Global Rank

#1124

of 3,515 researchers

Vulns

Critical0

High0

Medium3

Low0

Affected Assets

3plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

3 records


2023-10-02 00:00	Media Library Assistant <= 3.11 - Authenticated (Author+) Stored Cross-Site Scripting Media Library Assistant <= 3.11	`CVE-2023-24385`	6.4 Medium	n0paew	Yes
2023-03-14 00:00	Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files <= 2.7.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG files Embed Any Document <= 2.7.1	`CVE-2023-23707`	6.4 Medium	n0paew	Yes
2023-01-27 00:00	Greenshift – animation and page builder blocks <= 4.9.9 - Authenticated (Author+) Stored Cross-Site Scripting Greenshift <= 4.9.9	`CVE-2023-22707`	6.4 Medium	n0paew	Yes

Showing 1–3 of 3 reports