pang0lin

pang0lin is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #729 of 3,515 contributors. The disclosure was published in 2021.

Their research concentrates on SQL Injection, which accounts for 3 of their findings (60%). Other recurring categories include Cross-Site Scripting, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 7.7, peaking at 8.8. Severity breakdown: 0 critical and 4 high.

The most affected software includes Side Menu Lite (2), Cookie Bar (1), SP Project & Document Manager (1), across 4 distinct plugins, themes and core versions in total.

4 of the 5 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "SP Project & Document Manager <= 4.23 - Subscriber+ Arbitrary File Upload", scores 8.8 out of 10.

2021

Critical

High

Medium

Low

Global Rank

#729

of 3,515 researchers

Vulns

Critical0

High4

Medium1

Low0

Affected Assets

4plugins

Avg CVSS

7.7

Average score of vulnerabilities

Researcher Submissions

5 records


2021-09-22 00:00	Cookie Bar <= 1.8.8 - Admin+ Stored Cross-Site Scripting Cookie Bar <= 1.8.8	`CVE-2021-24653`	4.8 Medium	pang0lin	Yes
2021-07-28 00:00	SP Project & Document Manager <= 4.23 - Subscriber+ Arbitrary File Upload SP Project & Document Manager < 4.24	`CVE-2021-4225`	8.8 High	pang0lin	Yes
2021-07-27 00:00	Side Menu Lite - add sticky fixed buttons < 2.2.6 - SQL Injection Side Menu Lite < 2.2.6	`CVE-2021-24580`	8.8 High	pang0lin	Yes
2021-06-28 00:00	Side Menu Lite <= 2.2 - SQL Injection Side Menu Lite <= 2.1.1	`CVE-2021-24521`	7.2 High	pang0lin	Yes
2021-06-02 00:00	Stock in & out <= 1.0.4 - SQL Injection Stock in & out <= 1.0.4	`CVE-2021-24520`	8.8 High	pang0lin	No

Showing 1–5 of 5 reports