R3N0

R3N0 is a security researcher credited with 280 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #29 of 3,515 contributors. Their disclosures were published between 2019 and 2024. The most productive year was 2022, with 77 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 176 of their findings (63%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization. The average CVSS score across these disclosures is 6.4, peaking at 9.8. Severity breakdown: 20 critical and 52 high.

The most affected software includes Accordion (9), JobSearch WP Job Board (9), Real Estate 7 WordPress (9), across 175 distinct plugins, themes and core versions in total.

252 of the 280 disclosed issues have a vendor fix, while 28 remain unpatched. The most severe finding, "Cooked Pro < 1.8.0 - Unauthenticated Arbitrary File Upload", scores 9.8 out of 10.

201920202021202220232024

Critical

High

Medium

Low

Global Rank

#29

of 3,515 researchers

Vulns

280

Critical20

High52

Medium205

Low3

Affected Assets

234

133plugins101themes

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

280 records


2024-10-15 00:00	Cooked Pro < 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Cooked Pro < 1.8.0	`CVE-2024-49289`	6.4 Medium	R3N0	Yes
2024-10-15 00:00	Cooked Pro < 1.8.0 - Unauthenticated Arbitrary File Upload Cooked Pro < 1.8.0	`CVE-2024-49291`	9.8 Critical	R3N0	Yes
2024-10-15 00:00	Cooked Pro < 1.8.0 - Cross-Site Request Forgery Cooked Pro < 1.8.0	`CVE-2024-49290`	4.3 Medium	R3N0	Yes
2024-08-04 00:00	Cooked – Recipe Management <= 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Cooked <= 1.8.0	`CVE-2024-41816`	6.4 Medium	R3N0	Yes
2024-08-01 00:00	Filter & Grids <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode YMC Filter <= 2.9.2	`CVE-2024-39665`	6.4 Medium	R3N0	Yes
2024-08-01 00:00	Filter & Grids <= 2.8.33 - Cross-Site Request Forgery YMC Filter <= 2.8.33	`CVE-2024-39664`	4.3 Medium	R3N0	Yes
2024-07-17 00:00	Cooked – Recipe Management <= 1.7.15.4 - Authenticated (Contributor+) HTML Injection Cooked <= 1.7.15.4	`CVE-2024-39682`	5.0 Medium	R3N0	Yes
2024-07-17 00:00	Cooked – Recipe Management <= 1.7.15.4 - Cross-Site Request Forgery to Settings Update Cooked <= 1.7.15.4	`CVE-2024-39680`	4.3 Medium	R3N0	Yes
2024-07-17 00:00	Cooked – Recipe Management <= 1.7.15.4 - Cross-Site Request Forgery to Template Apply Cooked <= 1.7.15.4	`CVE-2024-39681`	5.4 Medium	R3N0	Yes
2024-07-17 00:00	Cooked – Recipe Management <= 1.7.15.4 - Cross-Site Request Forgery to Template Reset Cooked <= 1.7.15.4	`CVE-2024-39679`	4.3 Medium	R3N0	Yes

Showing 1–10 of 250 reports

Showing the 250 most recent of 280 records. Every record has its own page and is listed in the sitemap.