Pedro José Navas Pérez

Pedro José Navas Pérez is a security researcher credited with 6 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #703 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2023, with 5 findings.

Their research concentrates on Missing Authentication For Critical Function, which accounts for 2 of their findings (33%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 4.5, peaking at 7.5. Severity breakdown: 0 critical and 1 high.

The most affected software includes Active Directory Integration / LDAP… (3), Staff/Employee Business Directory… (2), Emergency password reset (1), across 3 distinct plugins, themes and core versions in total.

All 6 disclosed issues have since received a vendor fix.

20232024

Critical

High

Medium

Low

Global Rank

#703

of 3,515 researchers

Vulns

Critical0

High1

Medium3

Low2

Affected Assets

3plugins

Avg CVSS

4.5

Average score of vulnerabilities

Researcher Submissions

6 records


2024-06-03 00:00	Emergency Password Reset <= 8.0 - Cross-Site Request Forgery Emergency password reset <= 8.0	`CVE-2024-35648`	4.3 Medium	Pedro José Navas Pérez	Yes
2023-09-25 00:00	Active Directory Integration / LDAP Integration <= 4.1.10 - LDAP Passback Active Directory Integration / LDAP… <= 4.1.10	`CVE-2023-4506`	2.2 Low	Pedro José Navas Pérez	Yes
2023-09-25 00:00	Active Directory Integration / LDAP Integration <= 4.1.9 - Sensitive Information Exposure Active Directory Integration / LDAP… <= 4.1.9	`CVE-2023-4506`	7.5 High	Pedro José Navas Pérez	Yes
2023-09-25 00:00	Staff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP Passback Staff/Employee Business Directory… <= 1.2.3	`CVE-2023-4505`	2.2 Low	Pedro José Navas Pérez	Yes
2023-09-25 00:00	Active Directory Integration / LDAP Integration <= 4.1.9 - Unauthenticated Information Disclosure Active Directory Integration / LDAP… <= 4.1.9	`CVE-2023-5003`	5.3 Medium	Pedro José Navas Pérez	Yes
2023-09-08 00:00	Staff / Employee Business Directory for Active Directory <= 1.2.1 - Insufficient Escaping of Stored LDAP Values Staff/Employee Business Directory… <= 1.2.2	`CVE-2023-4757`	5.4 Medium	Pedro José Navas Pérez	Yes

Showing 1–6 of 6 reports