p7e4

p7e4 is a security researcher credited with 84 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #81 of 3,515 contributors. Their disclosures were published between 2021 and 2022. The most productive year was 2021, with 70 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 80 of their findings (95%). Other recurring categories include SQL Injection, Path Traversal. The average CVSS score across these disclosures is 6.2, peaking at 9.9. Severity breakdown: 1 critical and 4 high.

The most affected software includes .htaccess Redirect (1), 2Way VideoCalls and Random Chat (1), 3D Cover Carousel (1), across 84 distinct plugins, themes and core versions in total.

17 of the 84 disclosed issues have a vendor fix, while 67 remain unpatched. The most severe finding, "Visual Slide Box Builder <= 3.2.9 - Authenticated (Subscriber+) SQL Injection", scores 9.9 out of 10.