Prasanna V Balaji

Prasanna V Balaji is a security researcher credited with 18 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #287 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Scripting, which accounts for 11 of their findings (61%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization. The average CVSS score across these disclosures is 5.1, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Debug Assistant (2), Smarty for WordPress (2), AdFoxly (1), across 16 distinct plugins, themes and core versions in total.

4 of the 18 disclosed issues have a vendor fix, while 14 remain unpatched. The most severe finding, "Debug Assistant <= 1.4 - Cross-Site Request Forgery via imlt_create_admin", scores 8.8 out of 10.

2023

Critical

High

Medium

Low

Global Rank

#287

of 3,515 researchers

Vulns

Critical0

High2

Medium15

Low1

Affected Assets

16plugins

Avg CVSS

5.1

Average score of vulnerabilities

Researcher Submissions

18 records


2023-10-12 00:00	Snap Pixel <= 1.5.8 - Cross-Site Request Forgery Pixel Integration for Snapchat <= 1.5.8	`CVE-2023-45642`	4.3 Medium	Prasanna V Balaji	Yes
2023-10-12 00:00	Caret Country Access Limit <= 1.0.2 - Cross-Site Request Forgery Caret Country Access Limit <= 1.0.2	`CVE-2023-45641`	4.3 Medium	Prasanna V Balaji	Yes
2023-10-06 00:00	Automated Editor <= 1.3 - Cross-Site Request Forgery via admin menu pages Automated Editor <= 1.3	`CVE-2023-45276`	4.3 Medium	Prasanna V Balaji	No
2023-10-03 00:00	AmpedSense – AdSense Split Tester <= 4.68 - Unauthenticated Cross-Site Scripting AmpedSense <= 4.68	`CVE-2023-25476`	7.2 High	Prasanna V Balaji	No
2023-09-01 00:00	Smarty for WordPress <= 3.1.35 - Authenticated (Administrator+) Stored Cross-Site Scripting Smarty for WordPress <= 3.1.35	`CVE-2023-41661`	4.4 Medium	Prasanna V Balaji	No
2023-08-16 00:00	Carrot <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Carrrot <= 1.1.0	`CVE-2023-40328`	4.4 Medium	Prasanna V Balaji	No
2023-07-19 00:00	Smarty for WordPress <= 3.1.35 - Cross-Site Request Forgery via displaySmartyManagementPage Smarty for WordPress <= 3.1.35	`CVE-2023-37992`	5.3 Medium	Prasanna V Balaji	No
2023-05-18 00:00	Cookie Monster <= 1.51 - Authenticated (Administrator+) Stored Cross-Site Scripting Cookie Monster <= 1.51	`CVE-2023-33208`	4.4 Medium	Prasanna V Balaji	No
2023-05-18 00:00	WeSecur Security <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting WeSecur Security <= 1.2.1	`CVE-2023-24390`	4.4 Medium	Prasanna V Balaji	No
2023-04-14 00:00	AdFoxly – Ad Manager, AdSense Ads & Ads.txt <= 1.8.4 - Reflected Cross-Site Scripting AdFoxly <= 1.8.4	`CVE-2023-30754`	6.1 Medium	Prasanna V Balaji	No

Showing 1–10 of 18 reports