Rafael Aristodimou

Rafael Aristodimou is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #967 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2023, with 3 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (75%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 5.0, peaking at 6.6.

The most affected software includes Popup Box (2), Asgaros Forum (1), Wp-Adv-Quiz (1), across 3 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

20232024

Critical

High

Medium

Low

Global Rank

#967

of 3,515 researchers

Vulns

Critical0

High0

Medium4

Low0

Affected Assets

3plugins

Avg CVSS

5.0

Average score of vulnerabilities

Researcher Submissions

4 records


2024-01-03 00:00	Wp-Adv-Quiz <= 1.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Quiz Question and Message Wp-Adv-Quiz <= 1.0.2	`CVE-2023-5943`	4.4 Medium	Rafael Aristodimou	Yes
2023-12-06 00:00	Asgaros Forum <= 2.7.0 - Insufficient Authorization to Authenticated (Admin+) Arbitrary File Upload Asgaros Forum < 2.7.1	`CVE-2023-5604`	6.6 Medium	Rafael Aristodimou	Yes
2023-11-13 00:00	Popup Box <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting Popup Box < 3.8.7	`CVE-2023-5809`	4.4 Medium	Rafael Aristodimou	Yes
2023-10-27 00:00	Popup Box – Best WordPress Popup Plugin <= 3.7.8 - Authenticated (Admin+) Stored Cross-Site Scripting Popup Box <= 3.7.8	`CVE-2023-5343`	4.4 Medium	Rafael Aristodimou	Yes

Showing 1–4 of 4 reports