Pavitra Tiwari

Pavitra Tiwari is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #471 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Scripting, which accounts for 10 of their findings (100%). The average CVSS score across these disclosures is 4.4, peaking at 4.4.

The most affected software includes Article Directory Redux (1), CRM Memberships (1), Cyberus Key (1), across 10 distinct plugins, themes and core versions in total.

3 of the 10 disclosed issues have a vendor fix, while 7 remain unpatched.

2023

Critical

High

Medium

Low

Global Rank

#471

of 3,515 researchers

Vulns

Critical0

High0

Medium10

Low0

Affected Assets

10plugins

Avg CVSS

4.4

Average score of vulnerabilities

Researcher Submissions

10 records


2023-09-05 00:00	Regpack <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Regpack <= 0.1	`CVE-2023-41855`	4.4 Medium	Pavitra Tiwari	No
2023-08-28 00:00	GuruWalk Affiliates <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings GuruWalk Affiliates <= 1.0.0	`CVE-2023-27622`	4.4 Medium	Pavitra Tiwari	No
2023-07-05 00:00	Livestream Notice <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Livestream Notice <= 1.2.0	`CVE-2023-27621`	4.4 Medium	Pavitra Tiwari	Yes
2023-05-18 00:00	nuajik CDN <= 0.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting nuajik <= 0.1.0	`CVE-2023-33210`	4.4 Medium	Pavitra Tiwari	No
2023-04-24 00:00	CRM Memberships <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings CRM Memberships <= 2.2	`CVE-2023-27427`	4.4 Medium	Pavitra Tiwari	Yes
2023-04-24 00:00	Dynamically Register Sidebars <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings Dynamically Register Sidebars <= 1.0.1	`CVE-2023-31091`	4.4 Medium	Pavitra Tiwari	No
2023-04-24 00:00	NS Coupon to Become Customer <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings NS Coupon To Become Customer <= 1.2.2	`CVE-2023-27422`	4.4 Medium	Pavitra Tiwari	No
2023-04-24 00:00	Decon WP SMS <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings Decon WP SMS <= 1.1	`CVE-2023-27416`	4.4 Medium	Pavitra Tiwari	No
2023-04-14 00:00	Article Directory Redux <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting Article Directory Redux <= 1.0.2	`CVE-2023-30751`	4.4 Medium	Pavitra Tiwari	No
2023-03-20 00:00	Cyberus Key <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'uid' in 'cyberkey_settings' Plugin Setting Cyberus Key <= 1.0	`CVE-2023-28620`	4.4 Medium	Pavitra Tiwari	Yes

Showing 1–10 of 10 reports