Nithissh S

Nithissh S is a security researcher credited with 16 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #320 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Scripting, which accounts for 13 of their findings (81%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 5.3, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Actueel Financieel Nieuws (1), CC Custom Taxonomy (1), CloudNet360 (1), across 16 distinct plugins, themes and core versions in total.

4 of the 16 disclosed issues have a vendor fix, while 12 remain unpatched. The most severe finding, "SEO Change Monitor <= 1.2 - Authenticated (Subscriber+) SQL Injection", scores 8.8 out of 10.

2023

Critical

High

Medium

Low

Global Rank

#320

of 3,515 researchers

Vulns

Critical0

High2

Medium14

Low0

Affected Assets

16plugins

Avg CVSS

5.3

Average score of vulnerabilities

Researcher Submissions

16 records


2023-11-07 00:00	Actueel Financieel Nieuws – Denk Internet Solutions <= 5.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings Actueel Financieel Nieuws <= 5.2.0	`CVE-2023-47554`	5.5 Medium	Nithissh S	Yes
2023-10-25 00:00	Download CloudNet360 <= 3.2.0 - Reflected Cross-Site Scripting CloudNet360 <= 3.2.0	`CVE-2023-46643`	6.1 Medium	Nithissh S	No
2023-10-03 00:00	Pressference Exporter <= 1.0.3 - Authenticated (Administrator+) SQL Injection Pressference Exporter <= 1.0.3	`CVE-2023-45046`	7.2 High	Nithissh S	No
2023-08-21 00:00	Cookies by JM <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Cookies by JM <= 1.0	`CVE-2023-40604`	4.4 Medium	Nithissh S	No
2023-08-16 00:00	CT Commerce <= 2.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings CT Commerce <= 2.0.1	`CVE-2023-40007`	4.4 Medium	Nithissh S	No
2023-07-10 00:00	WP Default Feature Image <= 1.0.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Default Feature Image <= 1.0.1.1	`CVE-2023-25488`	4.4 Medium	Nithissh S	No
2023-07-04 00:00	Reservation.Studio widget <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting Reservation.Studio widget <= 1.0.11	`CVE-2023-24397`	4.4 Medium	Nithissh S	Yes
2023-05-22 00:00	WP-Piwik <= 1.0.27 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Display Name Connect Matomo <= 1.0.27	`CVE-2023-33211`	4.4 Medium	Nithissh S	Yes
2023-05-18 00:00	SEO Change Monitor <= 1.2 - Authenticated (Subscriber+) SQL Injection SEO Change Monitor <= 1.2	`CVE-2023-33209`	8.8 High	Nithissh S	Yes
2023-04-17 00:00	Sloth Logo Customizer <= 2.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting Sloth Logo Customizer <= 2.0.2	`CVE-2023-0603`	6.1 Medium	Nithissh S	No

Showing 1–10 of 16 reports