qilin_99

qilin_99 is a security researcher credited with 35 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #168 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2023, with 34 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 16 of their findings (46%). Other recurring categories include Guessable CAPTCHA, Cross-Site Scripting. The average CVSS score across these disclosures is 5.0, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Advanced Youtube Channel Pagination (2), WP Abstracts (2), WP BrowserUpdate (2), across 29 distinct plugins, themes and core versions in total.

25 of the 35 disclosed issues have a vendor fix, while 10 remain unpatched.

20232024

Critical

High

Medium

Low

Global Rank

#168

of 3,515 researchers

Vulns

Critical0

High1

Medium34

Low0

Affected Assets

29plugins

Avg CVSS

5.0

Average score of vulnerabilities

Researcher Submissions

35 records


2024-04-05 00:00	Captcha by BestWebSoft <= 5.2.0 - Captcha Bypass Captcha by BestWebSoft <= 5.2.0	`CVE-2024-31295`	5.3 Medium	qilin_99	Yes
2023-12-07 00:00	Caddy <= 1.9.7 - Cross-Site Request Forgery Caddy <= 1.9.7	`CVE-2023-49854`	4.3 Medium	qilin_99	Yes
2023-12-07 00:00	PayTR Taksit Tablosu <= 1.3.3 - Improper Authorization PayTR Taksit Tablosu <= 1.3.3	`CVE-2023-49853`	5.3 Medium	qilin_99	No
2023-11-28 00:00	WP Forms Puzzle Captcha <= 4.1 - Cross-Site Request Forgery to Cross-Site Scripting WP Forms Puzzle Captcha <= 4.1	`CVE-2023-48278`	6.1 Medium	qilin_99	No
2023-11-28 00:00	Product Size Chart For WooCommerce <= 1.1.5 - Cross-Site Request Forgery via get_save_option Sizor Product Size Chart For WooCommerce <= 1.1.5	`CVE-2023-48778`	6.5 Medium	qilin_99	Yes
2023-11-28 00:00	MkRapel Regiones y Ciudades de Chile para WC <= 4.3.0 - Cross-Site Request Forgery via multiple functions MkRapel Regiones y Ciudades de Chile… <= 4.3.0	`CVE-2023-48781`	6.5 Medium	qilin_99	No
2023-11-28 00:00	WooCommerce Login Redirect <= 2.2.4 - Cross-Site Request Forgery WooCommerce Login Redirect <= 2.2.4	`CVE-2023-48773`	4.3 Medium	qilin_99	No
2023-11-28 00:00	WP Forms Puzzle Captcha <= 4.1 - Captcha Bypass WP Forms Puzzle Captcha <= 4.1	`CVE-2023-48276`	5.3 Medium	qilin_99	No
2023-11-24 00:00	Captcha Code <= 2.9 - Captcha Bypass Captcha Code <= 2.9	`CVE-2023-48745`	5.3 Medium	qilin_99	Yes
2023-11-23 00:00	Contact Form Email <= 1.3.41 - Captcha Bypass Contact Form Email <= 1.3.41	`CVE-2023-48318`	5.3 Medium	qilin_99	Yes

Showing 1–10 of 35 reports