omstaendlig

omstaendlig is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #771 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (40%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, External Control Of File Name Or Path. The average CVSS score across these disclosures is 6.4, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Advanced iFrame (1), Link Fixer (1), Moving Media Library (1), across 5 distinct plugins, themes and core versions in total.

4 of the 5 disclosed issues have a vendor fix, while 1 remain unpatched.

2025

Critical

High

Medium

Low

Global Rank

#771

of 3,515 researchers

Vulns

Critical0

High1

Medium4

Low0

Affected Assets

5plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

5 records


2025-03-25 21:14	Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header Advanced iFrame <= 2024.5	`CVE-2025-1439`	6.4 Medium	omstaendlig	Yes
2025-03-05 20:19	Moving Media Library <= 1.22 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Deletion Moving Media Library <= 1.22	`CVE-2024-13897`	6.5 Medium	omstaendlig	Yes
2025-02-28 00:00	Simple Download Counter <= 2.0 - Authenticated (Author+) Arbitrary File Read Simple Download Counter <= 2.0	`CVE-2025-1730`	6.5 Medium	omstaendlig	Yes
2025-01-30 16:50	Link Fixer <= 3.4 - Unauthenticated Stored Cross-Site Scripting Link Fixer <= 3.4	`CVE-2025-0809`	7.2 High	omstaendlig	No
2025-01-16 18:23	Moving Users <= 1.05 - Unauthenticated Sensitive Information Exposure Moving Users <= 1.05	`CVE-2024-12637`	5.3 Medium	omstaendlig	Yes

Showing 1–5 of 5 reports