rastating

rastating is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #399 of 3,515 contributors. Their disclosures were published between 2015 and 2017. The most productive year was 2016, with 6 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 9 of their findings (82%). Other recurring categories include Improper Privilege Management, SQL Injection. The average CVSS score across these disclosures is 6.8, peaking at 8.8. Severity breakdown: 0 critical and 4 high.

The most affected software includes RegistrationMagic (2), Arabic Font (1), dwnldr (1), across 10 distinct plugins, themes and core versions in total.

9 of the 11 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "RegistrationMagic - Custom Registration Forms <= 3.8.0.4 - SQL Injection", scores 8.8 out of 10.

201520162017

Critical

High

Medium

Low

Global Rank

#399

of 3,515 researchers

Vulns

Critical0

High4

Medium7

Low0

Affected Assets

10plugins

Avg CVSS

6.8

Average score of vulnerabilities

Researcher Submissions

11 records


2017-12-10 00:00	RegistrationMagic - Custom Registration Forms <= 3.7.9.4 - Reflected Cross-Site Scripting RegistrationMagic <= 3.7.9.2	`N/A`	6.1 Medium	rastating	Yes
2017-12-10 00:00	RegistrationMagic - Custom Registration Forms <= 3.8.0.4 - SQL Injection RegistrationMagic <= 3.8.0.4	`N/A`	8.8 High	rastating	Yes
2017-07-20 00:00	Arabic Font <= 1.2 Cross-Site Request Forgery to Stored Cross-Site Scripting Arabic Font <= 1.2	`N/A`	7.2 High	rastating	No
2017-01-14 00:00	WP Whois Domain <= 1.0.0 - Reflected Cross-Site Scripting WP Whois Domain <= 1.0.0	`CVE-2017-18612`	6.1 Medium	rastating	No
2016-11-13 00:00	Lightbox < 1.6.8 - Stored Cross-Site Scripting lightbox < 1.6.8	`N/A`	7.2 High	rastating	Yes
2016-10-04 00:00	Portfolio Gallery <= 2.1.0 - Reflected Cross-Site Scripting Portfolio Gallery <= 2.1.0	`N/A`	6.1 Medium	rastating	Yes
2016-07-26 00:00	Woo Custom Checkout Field < 1.3.5 - Cross-Site Scripting Woo Custom Checkout Field < 1.3.5	`N/A`	6.1 Medium	rastating	Yes
2016-07-18 00:00	Woo Email Control < 1.02 - Reflected Cross-Site Scripting Woo Email Control < 1.02	`N/A`	6.1 Medium	rastating	Yes
2016-07-18 00:00	dwnldr < 1.01 - Cross-Site Scripting dwnldr <= 1.0	`CVE-2016-10964`	6.1 Medium	rastating	Yes
2016-02-07 00:00	Elfsight Instagram Widget – Instagram Gallery < 1.1.2 - Reflected Cross-Site Scripting Elfsight Instagram Widget < 1.1.2	`CVE-2016-11005`	6.1 Medium	rastating	Yes

Showing 1–10 of 11 reports