Pavak Tiwari

Pavak Tiwari is a security researcher credited with 7 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #631 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Scripting, which accounts for 7 of their findings (100%). The average CVSS score across these disclosures is 4.6, peaking at 6.1.

The most affected software includes eBecas (1), Forms Ada (1), Free WordPress Lead Generation Opt in (1), across 7 distinct plugins, themes and core versions in total.

1 of the 7 disclosed issues have a vendor fix, while 6 remain unpatched.

2023

Critical

High

Medium

Low

Global Rank

#631

of 3,515 researchers

Vulns

Critical0

High0

Medium7

Low0

Affected Assets

7plugins

Avg CVSS

4.6

Average score of vulnerabilities

Researcher Submissions

7 records


2023-05-11 00:00	eBecas <= 3.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings eBecas <= 3.1.3	`CVE-2023-32584`	4.4 Medium	Pavak Tiwari	No
2023-05-11 00:00	LetterPress <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings LetterPress <= 1.2.2	`CVE-2023-27415`	4.4 Medium	Pavak Tiwari	No
2023-05-11 00:00	NotifyVisitors <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings Free WordPress Lead Generation Opt in <= 1.0	`CVE-2023-27426`	4.4 Medium	Pavak Tiwari	No
2023-04-24 00:00	Forms Ada <= 1.0 - Reflected Cross-Site Scripting via 'p' parameter Forms Ada <= 1.0	`CVE-2023-27613`	6.1 Medium	Pavak Tiwari	No
2023-04-14 00:00	WP Roles at Registration <= 0.23 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Roles at Registration <= 0.23	`CVE-2023-27609`	4.4 Medium	Pavak Tiwari	No
2023-04-14 00:00	Motor Racing League <= 1.9.9 - Authenticated (Administrator+) Stored Cross-Site Scripting Motor Racing League <= 1.9.9	`CVE-2023-27614`	4.4 Medium	Pavak Tiwari	No
2023-03-14 00:00	Modern Events Calendar lite < 6.10.5 - Authenticated (Admin+) Stored Cross-Site Scripting Modern Events Calendar Lite < 6.10.5	`CVE-2023-1400`	4.4 Medium	Pavak Tiwari	Yes

Showing 1–7 of 7 reports