Rasoul Jahanshahi

202220232024

Critical

High

Medium

Low

Global Rank

#349

of 3,238 researchers

Vulns

12

Critical1

High11

Medium0

Low0

Affected Assets

11

11plugins

Avg CVSS

8.1

Average score of vulnerabilities

Researcher Submissions

12 records


2024-09-23 00:00	Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 3.3.3 - Authenticated (Admin+) PHAR Deserialization Easy Digital Downloads <= 3.3.3	`CVE-2022-2439`	7.2 High	Rasoul Jahanshahi	Yes
2024-09-12 00:00	WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization WP Editor <= 1.2.9	`CVE-2022-2446`	7.2 High	Rasoul Jahanshahi	Yes
2024-08-28 00:00	Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization Theme Editor <= 2.8	`CVE-2022-2440`	7.2 High	Rasoul Jahanshahi	Yes
2023-02-09 00:00	ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to PHAR Deserialization ImageMagick Engine <= 1.7.5	`CVE-2022-3568`	8.8 High	Rasoul Jahanshahi	Yes
2022-10-17 00:00	ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to Remote Command Execution ImageMagick Engine <= 1.7.5	`CVE-2022-2441`	8.8 High	Rasoul Jahanshahi	Yes
2022-08-22 00:00	WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization Ajax Load More <= 5.5.3	`CVE-2022-2433`	7.5 High	Rasoul Jahanshahi	Yes
2022-08-17 00:00	Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization Download Manager <= 3.2.49	`CVE-2022-2436`	8.8 High	Rasoul Jahanshahi	Yes
2022-08-10 00:00	Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization WPvivid <= 0.9.74	`CVE-2022-2442`	7.2 High	Rasoul Jahanshahi	Yes
2022-08-08 00:00	String Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization String locator <= 2.5.0	`CVE-2022-2434`	8.8 High	Rasoul Jahanshahi	Yes
2022-07-18 00:00	Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization Broken Link Checker <= 1.11.16	`CVE-2022-2438`	7.2 High	Rasoul Jahanshahi	Yes

Showing 1–10 of 12 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C