NeginNrb

NeginNrb is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #496 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 6 of their findings (67%). Other recurring categories include Cross-Site Scripting. The average CVSS score across these disclosures is 5.3, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Booking and Rental Manager for Bike (1), Custom Field Template (1), Educare (1), across 9 distinct plugins, themes and core versions in total.

4 of the 9 disclosed issues have a vendor fix, while 5 remain unpatched. The most severe finding, "eExamhall <= 4.0 - Cross Site Request Forgery", scores 8.8 out of 10.

2023

Critical

High

Medium

Low

Global Rank

#496

of 3,515 researchers

Vulns

Critical0

High2

Medium7

Low0

Affected Assets

9plugins

Avg CVSS

5.3

Average score of vulnerabilities

Researcher Submissions

9 records


2023-10-03 00:00	Mendeley <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting Mendeley Plugin <= 1.3.4	`CVE-2023-45073`	4.4 Medium	NeginNrb	No
2023-06-27 00:00	Quiz Expert – Easy Quiz Maker, Exam and Test Manager <= 1.5.0 - Cross-Site Request Forgery Quiz Expert <= 1.5.0	`CVE-2023-36522`	4.3 Medium	NeginNrb	No
2023-06-13 00:00	Booking and Rental Manager <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Booking and Rental Manager for Bike <= 1.2.1	`CVE-2023-35048`	4.4 Medium	NeginNrb	Yes
2023-06-13 00:00	Login Configurator <= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Login Configurator <= 2.1	`CVE-2023-34369`	4.4 Medium	NeginNrb	No
2023-03-21 00:00	Custom Field Template <= 2.5.8 - Cross-Site Request Forgery via Plugin Options Update Custom Field Template <= 2.5.8	`CVE-2023-22695`	4.3 Medium	NeginNrb	Yes
2023-02-21 00:00	Educare – Students & Result Management System <= 1.4.3 - Cross-Site Request Forgery Educare <= 1.4.3	`CVE-2023-25971`	4.3 Medium	NeginNrb	Yes
2023-01-23 00:00	Name Directory <= 1.27.1 - Cross Site Request Forgery Name Directory <= 1.27.1	`CVE-2023-22692`	4.3 Medium	NeginNrb	Yes
2023-01-13 00:00	eExamhall <= 4.0 - Cross Site Request Forgery Online Exam Software <= 4.0	`CVE-2023-22681`	8.8 High	NeginNrb	No
2023-01-13 00:00	Superior FAQ <= 1.0.2 - Cross Site Request Forgery Superior FAQ <= 1.0.2	`CVE-2023-22678`	8.8 High	NeginNrb	No

Showing 1–9 of 9 reports