Plugin Vulnerabilities

Plugin Vulnerabilities is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #869 of 3,515 contributors. Their disclosures were published between 2016 and 2018. The most productive year was 2017, with 2 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (75%). Other recurring categories include Deserialization Of Untrusted Data. The average CVSS score across these disclosures is 7.0, peaking at 7.4. Severity breakdown: 0 critical and 3 high.

The most affected software includes Blog2Social (1), FG Joomla to WordPress (1), WP Activity Log (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

201620172018

Critical

High

Medium

Low

Global Rank

#869

of 3,515 researchers

Vulns

Critical0

High3

Medium1

Low0

Affected Assets

4plugins

Avg CVSS

7.0

Average score of vulnerabilities

Researcher Submissions

4 records


2018-09-21 00:00	Blog2Social: Social Media Auto Post & Scheduler < 5.0.1 - PHP Object Injection Blog2Social < 5.0.1	`N/A`	7.4 High	Plugin Vulnerabilities	Yes
2017-08-24 00:00	FG Joomla to WordPress < 3.31.0 - Authenticated Stored Cross-Site Scripting FG Joomla to WordPress < 3.31.0	`N/A`	7.4 High	Plugin Vulnerabilities	Yes
2017-02-07 00:00	XO Security < 1.5.3 - Cross-Site Scripting XO Security < 1.5.3	`CVE-2017-18541`	6.1 Medium	Plugin Vulnerabilities	Yes
2016-06-27 00:00	WP Activity Log 1.5 - 2.4.3 - Reflected Cross-Site Scripting WP Activity Log 1.5 – 2.4.3	`N/A`	7.1 High	Plugin Vulnerabilities	Yes

Showing 1–4 of 4 reports