qerogram

qerogram is a security researcher credited with 12 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #374 of 3,515 contributors. Their disclosures were published between 2022 and 2023. The most productive year was 2022, with 9 findings.

Their research concentrates on SQL Injection, which accounts for 4 of their findings (33%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Cross-Site Scripting. The average CVSS score across these disclosures is 6.5, peaking at 8.8. Severity breakdown: 0 critical and 5 high.

The most affected software includes Easy Social Icons (2), HTTP Headers (2), All-in-one Sticky Floating Contact Form (1), across 10 distinct plugins, themes and core versions in total.

11 of the 12 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload", scores 8.8 out of 10.

20222023

Critical

High

Medium

Low

Global Rank

#374

of 3,515 researchers

Vulns

Critical0

High5

Medium7

Low0

Affected Assets

10plugins

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

12 records


2023-06-19 00:00	HTTP Headers <= 1.18.10 - Authenticated(Administrator+) Remote Code Execution HTTP Headers <= 1.18.10	`CVE-2023-1208`	6.6 Medium	qerogram	Yes
2023-04-24 00:00	HTTP Headers <= 1.18.8 - Authenticated(Administrator+) SQL Injection HTTP Headers <= 1.18.8	`CVE-2023-1207`	6.6 Medium	qerogram	Yes
2023-02-09 00:00	My Sticky Elements <= 2.0.8 - Authenticated (Admin+) SQL Injection All-in-one Sticky Floating Contact Form 2.0.8	`CVE-2023-0487`	7.2 High	qerogram	Yes
2022-12-20 00:00	Metricool <= 1.17 - Authenticated (Administrator+) Stored Stored Cross-Site Scripting Metricool <= 1.17	`CVE-2022-4299`	5.5 Medium	qerogram	Yes
2022-05-18 00:00	WP SVG Icons <= 3.2.3 - Authenticated (Admin+) Arbitrary File Upload WP SVG Icons <= 3.2.3	`CVE-2022-0863`	7.2 High	qerogram	No
2022-03-21 00:00	Easy Social Icons <= 3.2.0 - Admin+ Stored Cross-Site Scripting Easy Social Icons < 3.2.1	`CVE-2022-0840`	5.5 Medium	qerogram	Yes
2022-03-14 00:00	MapPress Maps for WordPress <= 2.73.12 - Admin+ File Upload to Remote Code Execution MapPress < 2.73.13	`CVE-2022-0537`	6.0 Medium	qerogram	Yes
2022-03-08 00:00	Easy Social Icons <= 3.1.3 - Admin+ SQL Injection Easy Social Icons <= 3.1.3	`CVE-2022-0887`	5.5 Medium	qerogram	Yes
2022-03-01 00:00	String Locator <= 2.4.2 - Authenticated Arbitrary File Read String locator < 2.5.0	`CVE-2022-0493`	4.9 Medium	qerogram	Yes
2022-02-23 00:00	Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload Booking for Appointments and Events… < 1.0.47	`CVE-2022-0687`	8.8 High	qerogram	Yes

Showing 1–10 of 12 reports