Rasi Afeef

Rasi Afeef is a security researcher credited with 28 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #194 of 3,515 contributors. Their disclosures were published between 2021 and 2022. The most productive year was 2022, with 27 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 21 of their findings (75%). Other recurring categories include Cross-Site Scripting, Missing Authorization. The average CVSS score across these disclosures is 7.5, peaking at 8.8. Severity breakdown: 0 critical and 18 high.

The most affected software includes Advance Product Search- Voice & Ajax… (2), Auto Upload Images (2), RD Station (2), across 25 distinct plugins, themes and core versions in total.

19 of the 28 disclosed issues have a vendor fix, while 9 remain unpatched. The most severe finding, "Forms by CaptainForm <= 2.5.3 - Cross-Site Request Forgery", scores 8.8 out of 10.

20212022

Critical

High

Medium

Low

Global Rank

#194

of 3,515 researchers

Vulns

Critical0

High18

Medium10

Low0

Affected Assets

25plugins

Avg CVSS

7.5

Average score of vulnerabilities

Researcher Submissions

28 records


2022-10-29 00:00	Forms by CaptainForm <= 2.5.3 - Cross-Site Request Forgery Forms by CaptainForm <= 2.5.3	`CVE-2022-43459`	8.8 High	Rasi Afeef	No
2022-10-24 00:00	Auto Upload Images <= 3.3 - Authenticated (Admin+) Stored Cross-Site Scripting Auto Upload Images <= 3.3	`N/A`	5.5 Medium	Rasi Afeef	Yes
2022-10-24 00:00	Auto Upload Images <= 3.3 - Cross-Site Request Forgery Auto Upload Images <= 3.3	`CVE-2022-42880`	8.8 High	Rasi Afeef	Yes
2022-10-18 00:00	RD Station <= 5.1.3 - Cross-Site Request Forgery to Plugin Log Deletion RD Station <= 5.1.3	`CVE-2022-38139`	8.8 High	Rasi Afeef	Yes
2022-09-30 00:00	OSM - OpenStreetMap <= 6.0 - Cross-Site Request Forgery OSM <= 6.0	`CVE-2022-30544`	8.8 High	Rasi Afeef	Yes
2022-09-30 00:00	Media Library Folders <= 7.1.1 - Cross-Site Request Forgery Media Library Folders <= 7.1.1	`CVE-2022-41634`	8.8 High	Rasi Afeef	Yes
2022-09-29 00:00	HREFLANG Tags Lite <= 2.0.0 - Missing Authorization to Data Reset HREFLANG Tags Lite <= 2.0.0	`CVE-2022-36418`	5.3 Medium	Rasi Afeef	No
2022-09-27 00:00	TH Advance Product Search <= 1.1.4 - Missing Authorization to Plugin Settings Change Advance Product Search- Voice & Ajax… <= 1.1.4	`CVE-2022-40218`	6.5 Medium	Rasi Afeef	Yes
2022-09-27 00:00	TH Advance Product Search <= 1.1.4 - Missing Authorization to Plugin Settings Reset Advance Product Search- Voice & Ajax… <= 1.1.4	`CVE-2022-38057`	5.3 Medium	Rasi Afeef	Yes
2022-09-27 00:00	Oceanwp sticky header <= 1.0.8 - Cross-Site Request Forgery to Plugin Settings Update Oceanwp sticky header <= 1.0.8	`CVE-2022-35730`	8.8 High	Rasi Afeef	No

Showing 1–10 of 28 reports