Ran Crane

Ran Crane is a security researcher credited with 15 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #333 of 3,515 contributors. The disclosure was published in 2022.

Their research concentrates on Cross-Site Scripting, which accounts for 15 of their findings (100%). The average CVSS score across these disclosures is 6.2, peaking at 7.1. Severity breakdown: 0 critical and 1 high.

The most affected software includes Admin Menu Editor (1), Advanced Admin Search (1), Booking for Appointments and Events… (1), across 15 distinct plugins, themes and core versions in total.

9 of the 15 disclosed issues have a vendor fix, while 6 remain unpatched.

2022

Critical

High

Medium

Low

Global Rank

#333

of 3,515 researchers

Vulns

Critical0

High1

Medium14

Low0

Affected Assets

15plugins

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

15 records


2022-05-17 00:00	Advanced Admin Search <= 1.1.2 - Cross-Site Scripting Advanced Admin Search <= 1.1.2	`CVE-2022-0626`	6.1 Medium	Ran Crane	Yes
2022-04-13 00:00	Admin Menu Editor <= 1.0.4 - Reflected Cross-Site Scripting Admin Menu Editor <= 1.0.4	`CVE-2022-0625`	6.1 Medium	Ran Crane	No
2022-03-07 00:00	Popup Like box <= 3.6.0 - Reflected Cross-Site Scripting Popup Like box < 3.6.1	`CVE-2022-0641`	6.1 Medium	Ran Crane	Yes
2022-03-04 00:00	Conference Scheduler <= 2.4.3 - Reflected Cross-Site Scripting Conference Scheduler <= 2.4.3	`CVE-2022-0600`	6.1 Medium	Ran Crane	Yes
2022-03-01 00:00	Database Peek <= 1.2 - Reflected Cross-Site Scripting Database Peek <= 1.2	`CVE-2022-0619`	6.1 Medium	Ran Crane	No
2022-03-01 00:00	Delete Old Order <= 0.2 - Cross-Site Scripting Delete Old Orders <= 0.2	`CVE-2022-0620`	7.1 High	Ran Crane	No
2022-03-01 00:00	Mapping Multiple URLs Redirect Same Page <= 5.8 - Reflected Cross-Site Scripting Mapping multiple URLs redirect same page <= 5.8	`CVE-2022-0599`	6.1 Medium	Ran Crane	No
2022-03-01 00:00	Bulk Creator <= 1.0.1 - Reflected Cross-Site Scripting Bulk Creator <= 1.0.1	`CVE-2022-0647`	6.1 Medium	Ran Crane	No
2022-03-01 00:00	Bank Mellat <= 2.0.0 - Reflected Cross-Site Scripting Online Payment for Bank Mellat <= 2.0.0	`CVE-2022-0643`	6.1 Medium	Ran Crane	Yes
2022-03-01 00:00	dTabs <= 1.4 - Reflected Cross-Site Scripting dTabs <= 1.4	`CVE-2022-0621`	6.1 Medium	Ran Crane	No

Showing 1–10 of 15 reports