Nishiv

Nishiv is a security researcher credited with 21 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #247 of 3,515 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2025, with 16 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 8 of their findings (38%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Improper Access Control. The average CVSS score across these disclosures is 5.4, peaking at 7.5. Severity breakdown: 0 critical and 1 high.

The most affected software includes Qubely (2), aBlocks (1), All Bootstrap Blocks (1), across 20 distinct plugins, themes and core versions in total.

17 of the 21 disclosed issues have a vendor fix, while 4 remain unpatched.

20242025

Critical

High

Medium

Low

Global Rank

#247

of 3,515 researchers

Vulns

Critical0

High1

Medium20

Low0

Affected Assets

20plugins

Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

21 records


2025-03-13 00:00	Omnipress <= 1.5.4 - Authenticated (Contributor+) Post Disclosure Omnipress <= 1.5.4	`CVE-2024-13407`	4.3 Medium	Nishiv	Yes
2025-03-11 00:00	Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode Page Builder: Pagelayer <= 1.9.8	`CVE-2024-13430`	4.3 Medium	Nishiv	Yes
2025-03-10 00:00	Qubely – Advanced Gutenberg Blocks <= 1.8.13 - Authenticated (Contributor+) Sensitive Information Exposure via qubely_get_content Qubely <= 1.8.13	`CVE-2024-13228`	4.3 Medium	Nishiv	Yes
2025-03-07 21:25	SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting SlingBlocks <= 1.5.0	`CVE-2024-13675`	6.4 Medium	Nishiv	Yes
2025-03-06 21:13	VK Blocks <= 1.94.2.2 - Missing Authorization to Sensitive Information Exposure VK Blocks <= 1.94.2.2	`CVE-2024-13635`	4.3 Medium	Nishiv	Yes
2025-02-28 00:00	GenerateBlocks <= 1.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via 'get_image_description' GenerateBlocks <= 1.9.1	`CVE-2024-13546`	4.3 Medium	Nishiv	Yes
2025-02-17 00:00	aBlocks – WordPress Gutenberg Blocks <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting aBlocks <= 1.6.1	`CVE-2024-13465`	6.4 Medium	Nishiv	Yes
2025-02-13 18:36	Qubely – Advanced Gutenberg Blocks <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' and 'UniqueID' Qubely <= 1.8.12	`CVE-2024-9601`	6.5 Medium	Nishiv	Yes
2025-02-11 21:07	Rise Blocks – A Complete Gutenberg Page Builder <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via TitleTag Parameter Rise Blocks <= 3.6	`CVE-2025-0506`	6.4 Medium	Nishiv	Yes
2025-02-03 00:00	B Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode bSlider <= 1.1.23	`CVE-2024-13514`	4.3 Medium	Nishiv	Yes

Showing 1–10 of 21 reports