Panagiotis Vagenas

Panagiotis Vagenas is a security researcher credited with 26 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #202 of 3,515 contributors. Their disclosures were published between 2015 and 2019. The most productive year was 2016, with 12 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 5 of their findings (19%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 7.6, peaking at 9.8. Severity breakdown: 3 critical and 14 high.

The most affected software includes Users Ultra Membership (6), User Meta Manager (3), GEO Plugin by Squirrly SEO (2), across 16 distinct plugins, themes and core versions in total.

24 of the 26 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "WP User Frontend < 2.3.11 - Arbitrary File Upload", scores 9.8 out of 10.

20152016201720182019

Critical

High

Medium

Low

Global Rank

#202

of 3,515 researchers

Vulns

Critical3

High14

Medium9

Low0

Affected Assets

16plugins

Avg CVSS

7.6

Average score of vulnerabilities

Researcher Submissions

26 records


2019-04-23 00:00	WDContactFormBuilder <= 1.0.68 - Cross-Site Request Forgery WDContactFormBuilder < 1.0.69	`CVE-2019-11557`	8.8 High	Panagiotis Vagenas	Yes
2018-01-09 00:00	WordPress Download Manager <= 2.9.6 - Cross-Site Request Forgery Download Manager <= 2.9.6	`N/A`	6.3 Medium	Panagiotis Vagenas	Yes
2018-01-02 00:00	Social Media Widget by Acurax <= 3.2.5 - Cross-Site Request Forgery leading to Cross-Site Scripting via the recordsArray Parameter Social Media Widget by Acurax < 3.2.6	`CVE-2018-6357`	8.8 High	Panagiotis Vagenas	Yes
2016-07-13 00:00	All in One SEO Pack <= 2.3.7 - Unauthenticated Stored Cross-Site Scripting All in One SEO < 2.3.8	`N/A`	7.2 High	Panagiotis Vagenas	Yes
2016-07-11 00:00	SEO Plugin by Squirrly SEO < 6.1.5 - Missing Authorization Checks GEO Plugin by Squirrly SEO < 6.1.5	`N/A`	7.3 High	Panagiotis Vagenas	Yes
2016-07-11 00:00	SEO Plugin by Squirrly SEO < 6.1.5 - Directory Traversal GEO Plugin by Squirrly SEO < 6.1.5	`N/A`	7.5 High	Panagiotis Vagenas	Yes
2016-07-07 00:00	Profile Builder <= 2.4.0 - Privilege Escalation User Profile Builder < 2.4.1	`N/A`	8.8 High	Panagiotis Vagenas	Yes
2016-05-24 00:00	Caldera Forms – More Than Contact Forms < 1.4.0 - Sensitive Information Disclosure Caldera Forms < 1.4.0	`N/A`	6.5 Medium	Panagiotis Vagenas	Yes
2016-05-24 00:00	WP Fastest Cache <= 0.8.5.7 - Local File Inclusion WP Fastest Cache <= 0.8.5.7	`N/A`	8.8 High	Panagiotis Vagenas	Yes
2016-05-23 00:00	WP Fastest Cache <= 0.8.5.7 - Missing Authorization WP Fastest Cache <= 0.8.5.7	`N/A`	4.9 Medium	Panagiotis Vagenas	Yes

Showing 1–10 of 26 reports