Raad Haddad

Raad Haddad is a security researcher credited with 44 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #153 of 3,899 contributors. The disclosure was published in 2022.

Their research concentrates on Improper Neutralization Of Input During Web Page Generation, which accounts for 15 of their findings (34%). Other recurring categories include Cross-Site Request Forgery, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 6.6, peaking at 8.8. Severity breakdown: 0 critical and 15 high.

The most affected software includes Frontend File Manager Plugin (3), reSmush.it (3), Simple File List (3), across 31 distinct plugins, themes and core versions in total.

37 of the 44 disclosed issues have a vendor fix, while 7 remain unpatched. The most severe finding, "reSmush.it Image Optimizer <= 0.4.6 - Cross-Site Request Forgery", scores 8.8 out of 10.

2022

Critical

High

Medium

Low

Global Rank

#153

of 3,899 researchers

Vulns

Critical0

High15

Medium29

Low0

Affected Assets

31plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

44 records


2022-12-05 00:00	Autoptimize <= 3.0.4 - Sensitive Information Disclosure Autoptimize <= 3.0.4	`CVE-2022-4057`	5.3 Medium	Raad Haddad	Yes
2022-10-31 00:00	DeepL Pro API Translation <= 1.7.4 - Sensitive Information Disclosure Translation with DeepL API <= 1.7.4	`CVE-2022-3691`	6.5 Medium	Raad Haddad	Yes
2022-10-26 00:00	reSmush.it Image Optimizer <= 0.4.6 - Cross-Site Request Forgery reSmush.it <= 0.4.6	`CVE-2022-2449`	8.8 High	Raad Haddad	Yes
2022-09-29 00:00	AdminPad <= 2.1 - Cross-Site Request Forgery AdminPad <= 2.1	`CVE-2022-2762`	8.8 High	Raad Haddad	Yes
2022-09-26 00:00	Frontend File Manager Plugin <= 21.2 - Cross-Site Request Forgery to File Upload Frontend File Manager Plugin <= 21.2	`CVE-2022-3126`	8.8 High	Raad Haddad	Yes
2022-09-21 00:00	Passster <= 3.5.5.5.1 - Insecure Password Storage to Sensitive Data Exposure Passster <= 3.5.5.5.1	`CVE-2022-3206`	5.3 Medium	Raad Haddad	Yes
2022-09-19 00:00	Simple File List <= 4.4.12 - Cross-Site Request Forgery to Page Creation Simple File List <= 4.4.12	`CVE-2022-3208`	8.8 High	Raad Haddad	Yes
2022-09-19 00:00	Simple File List <= 4.4.11 - Reflected Cross-Site Scripting Simple File List <= 4.4.11	`CVE-2022-3207`	6.1 Medium	Raad Haddad	Yes
2022-09-19 00:00	Download Monitor <= 4.5.97 - Authenticated (Administrator+) Arbitrary File Download Download Monitor <= 4.5.97	`CVE-2022-2981`	6.8 Medium	Raad Haddad	Yes
2022-09-19 00:00	reSmush.it Image Optimizer <= 0.4.5 - Authenticated (Administrator+) Cross-Site Scripting reSmush.it <= 0.4.5	`CVE-2022-2448`	5.5 Medium	Raad Haddad	Yes

Showing 1–10 of 44 reports