Nitin Venkatesh

Nitin Venkatesh is a security researcher credited with 14 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #340 of 3,515 contributors. The disclosure was published in 2015.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 5 of their findings (36%). Other recurring categories include SQL Injection, Cross-Site Scripting. The average CVSS score across these disclosures is 7.3, peaking at 8.8. Severity breakdown: 0 critical and 10 high.

The most affected software includes Unite Gallery Lite (3), CP Contact Form with PayPal (2), Analyticator (1), across 11 distinct plugins, themes and core versions in total.

13 of the 14 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Unite Gallery Lite <= 1.4.6 - Cross-Site Request Forgery & Authenticated SQL Injection", scores 8.8 out of 10.

2015

Critical

High

Medium

Low

Global Rank

#340

of 3,515 researchers

Vulns

Critical0

High10

Medium4

Low0

Affected Assets

11plugins

Avg CVSS

7.3

Average score of vulnerabilities

Researcher Submissions

14 records


2015-07-25 00:00	Unite Gallery Lite <= 1.4.6 - Cross-Site Request Forgery & Authenticated SQL Injection Unite Gallery Lite <= 1.4.6	`CVE-2015-9445`	8.8 High	Nitin Venkatesh	Yes
2015-07-25 00:00	Music Store – WordPress eCommerce < 1.0.15 - Open Redirect Music Store < 1.0.15	`N/A`	7.2 High	Nitin Venkatesh	Yes
2015-07-25 00:00	Unite Gallery Lite < 1.5 - SQL Injection Unite Gallery Lite < 1.5	`CVE-2015-9446`	8.8 High	Nitin Venkatesh	Yes
2015-07-25 00:00	Unite Gallery Lite < 1.5 - Cross-Site Request Forgery and SQL Injection Unite Gallery Lite < 1.5	`CVE-2015-9447`	7.2 High	Nitin Venkatesh	Yes
2015-07-20 00:00	Portfolio Plugin < 1.05 - Cross-Site Request Forgery Portfolio Plugin < 1.05	`CVE-2015-6523`	6.3 Medium	Nitin Venkatesh	Yes
2015-07-18 00:00	WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.1.3 - Sensitive Information Exposure WordPress Mobile Pack < 2.1.3	`CVE-2015-9269`	7.5 High	Nitin Venkatesh	Yes
2015-07-15 00:00	WP Attachment Export < 0.2.4 - Arbitrary File Download WP Attachment Export < 0.2.4	`CVE-2015-20067`	7.5 High	Nitin Venkatesh	Yes
2015-07-09 00:00	CP Contact Form with PayPal < 1.1.6 - Cross-Site Request Forgery CP Contact Form with PayPal < 1.1.6	`CVE-2015-9233`	8.8 High	Nitin Venkatesh	Yes
2015-07-09 00:00	CP Contact Form with PayPal < 1.1.6 - SQL Injection CP Contact Form with PayPal < 1.1.6	`CVE-2015-9234`	7.2 High	Nitin Venkatesh	Yes
2015-07-05 00:00	StageShow < 5.0.9 - Open Redirect StageShow < 5.0.9	`CVE-2015-5461`	6.1 Medium	Nitin Venkatesh	Yes

Showing 1–10 of 14 reports