pvdl

pvdl is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #872 of 3,515 contributors. The disclosure was published in 2015.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 2 of their findings (50%). Other recurring categories include Cross-Site Scripting. The average CVSS score across these disclosures is 6.9, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Count per Day (1), Gallery (1), Relevant (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix. The most severe finding, "WPS Hide Login <= 1.0 - Cross-Site Request Forgery", scores 8.8 out of 10.

2015

Critical

High

Medium

Low

Global Rank

#872

of 3,515 researchers

Vulns

Critical0

High2

Medium2

Low0

Affected Assets

4plugins

Avg CVSS

6.9

Average score of vulnerabilities

Researcher Submissions

4 records


2015-10-03 00:00	Relevant – Related, Featured, Latest, and Popular Posts by BestWebSoft <= 1.0.7 - Authenticated (Admin+) Stored Cross-Site Scripting Relevant < 1.0.8	`CVE-2015-9384`	5.5 Medium	pvdl	Yes
2015-09-05 00:00	Gallery – Photo Albums Plugin < 1.3.47 - Cross-Site Scripting Gallery < 1.3.50	`CVE-2015-7386`	6.1 Medium	pvdl	Yes
2015-07-22 00:00	Count per Day <= 3.4 - Cross-Site Request Forgery Count per Day < 3.4.1	`CVE-2015-5533`	7.2 High	pvdl	Yes
2015-04-27 00:00	WPS Hide Login <= 1.0 - Cross-Site Request Forgery WPS Hide Login < 1.1	`CVE-2015-9498`	8.8 High	pvdl	Yes

Showing 1–4 of 4 reports