Neven Birusk

Neven Birusk is a security researcher credited with 73 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #90 of 3,515 contributors. Their disclosures were published between 2017 and 2018. The most productive year was 2017, with 68 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 64 of their findings (88%). Other recurring categories include SQL Injection, Path Traversal. The average CVSS score across these disclosures is 6.4, peaking at 9.8. Severity breakdown: 2 critical and 8 high.

The most affected software includes Contact Form by BestWebSoft (2), Newsletters (2), Simple Login Log (2), across 69 distinct plugins, themes and core versions in total.

72 of the 73 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Simple Login Log < 1.1.2 - SQL Injection", scores 9.8 out of 10.

20172018

Critical

High

Medium

Low

Global Rank

#90

of 3,515 researchers

Vulns

Critical2

High8

Medium63

Low0

Affected Assets

69plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

73 records


2018-07-24 00:00	Strong Testimonials <= 2.31.4 - Reflected Cross-Site Scripting Strong Testimonials <= 2.31.4	`N/A`	6.1 Medium	Neven Birusk	Yes
2018-06-20 00:00	Ultimate Form Builder Lite <= 1.3.7 - Cross-Site Scripting Contact Form for WordPress <= 1.3.7	`N/A`	6.4 Medium	Neven Birusk	Yes
2018-01-18 00:00	Soundy Background Music <= 3.9 - Cross-Site Scripting Soundy Background Music <= 3.9	`CVE-2018-6002`	6.1 Medium	Neven Birusk	No
2018-01-10 00:00	Smooth Slider < 2.8.7 - Authenticated SQL Injection Smooth Slider < 2.8.7	`CVE-2018-5373`	8.8 High	Neven Birusk	Yes
2018-01-10 00:00	Testimonial Slider < 1.2.5 - SQL Injection Testimonial Slider < 1.2.5	`CVE-2018-5372`	8.8 High	Neven Birusk	Yes
2017-12-04 00:00	PDF & Print by BestWebSoft < 2.0.3 - Reflected Cross-Site Scripting PDF & Print by BestWebSoft < 2.0.3	`CVE-2018-20970`	6.1 Medium	Neven Birusk	Yes
2017-10-10 00:00	Simple Login Log < 1.1.2 - SQL Injection Simple Login Log < 1.1.2	`CVE-2017-18514`	9.8 Critical	Neven Birusk	Yes
2017-10-10 00:00	Simple Login Log < 1.1.2 - SQL Injection Simple Login Log < 1.1.2	`CVE-2017-18573`	9.8 Critical	Neven Birusk	Yes
2017-09-05 00:00	User Access Manager <= 1.2.14 - Reflected Cross-Site Scripting User Access Manager <= 1.2.14	`N/A`	6.1 Medium	Neven Birusk	Yes
2017-09-05 00:00	User Access Manager <= 2.0.8 - Reflected Cross-Site Scripting User Access Manager < 2.0.9	`N/A`	6.1 Medium	Neven Birusk	Yes

Showing 1–10 of 73 reports