Rahul Pratap Singh

Rahul Pratap Singh is a security researcher credited with 19 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #271 of 3,515 contributors. Their disclosures were published between 2016 and 2018. The most productive year was 2016, with 18 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 18 of their findings (95%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.3, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Echo Sign (2), WP Symposium Pro (2), CM Ad Changer (1), across 17 distinct plugins, themes and core versions in total.

All 19 disclosed issues have since received a vendor fix. The most severe finding, "WP Symposium Pro < 16.01 - Cross-Site Request Forgery", scores 8.8 out of 10.

201620172018

Critical

High

Medium

Low

Global Rank

#271

of 3,515 researchers

Vulns

Critical0

High2

Medium17

Low0

Affected Assets

17plugins

Avg CVSS

6.3

Average score of vulnerabilities

Researcher Submissions

19 records


2018-01-27 00:00	Import Export All WordPress Images, Users & Post Types <= 3.8.7 - Reflected Cross-Site Scripting WP Ultimate CSV Importer < 3.8.8	`N/A`	6.1 Medium	Rahul Pratap Singh	Yes
2016-11-03 00:00	DW Question & Answer < 1.4.2.3 - Stored Cross-Site Scripting DW Question & Answer < 1.4.2.3	`N/A`	6.1 Medium	Rahul Pratap Singh	Yes
2016-04-21 00:00	CM Ad Changer < 1.7.6 - Cross-Site Scripting CM Ad Changer < 1.7.6	`N/A`	5.5 Medium	Rahul Pratap Singh	Yes
2016-04-21 00:00	Tweet Wheel < 1.0.3.3 - Reflected Cross-Site Scripting Tweet Wheel < 1.0.3.3	`CVE-2016-10986`	6.1 Medium	Rahul Pratap Singh	Yes
2016-04-21 00:00	Unlimited Pop-Ups < 1.4.4 - Cross-Site Scripting Unlimited PopUps <= 1.4.3	`N/A`	6.1 Medium	Rahul Pratap Singh	Yes
2016-04-21 00:00	Easy Social Share Buttons for WordPress <= 3.4.1 - Cross-Site Scripting Easy Social Share Buttons for WordPress < 3.5	`N/A`	6.1 Medium	Rahul Pratap Singh	Yes
2016-04-21 00:00	افزونه پیامک ووکامرس Persian WooCommerce SMS < 3.3.3 - Cross-Site Scripting افزونه پیامک ووکامرس Persian… <= 3.3.2	`CVE-2016-10987`	6.1 Medium	Rahul Pratap Singh	Yes
2016-04-21 00:00	Echo Sign < 1.2 - Reflected Cross-Site Scripting Echo Sign < 1.2	`CVE-2016-10984`	6.1 Medium	Rahul Pratap Singh	Yes
2016-04-21 00:00	Echo Sign < 1.2 - Reflected Cross-Site Scripting Echo Sign < 1.2	`CVE-2016-10985`	6.1 Medium	Rahul Pratap Singh	Yes
2016-04-21 00:00	Google SEO Pressor for Rich snippets <= 1.2.2 - Cross-Site Scripting Google SEO Pressor for Rich snippets < 1.2.7	`N/A`	6.1 Medium	Rahul Pratap Singh	Yes

Showing 1–10 of 19 reports