rezaduty

rezaduty is a security researcher credited with 41 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #151 of 3,515 contributors. Their disclosures were published between 2019 and 2024. The most productive year was 2023, with 27 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 24 of their findings (59%). Other recurring categories include Use Of Less Trusted Source, Cross-Site Scripting. The average CVSS score across these disclosures is 5.7, peaking at 8.8. Severity breakdown: 0 critical and 8 high.

The most affected software includes LOGIN AND REGISTRATION ATTEMPTS LIMIT (2), Two-factor authentication (formerly IP… (2), AidWP (1), across 39 distinct plugins, themes and core versions in total.

28 of the 41 disclosed issues have a vendor fix, while 13 remain unpatched. The most severe finding, "Slider by Supsystic <= 1.8.6 - Cross-Site Request Forgery", scores 8.8 out of 10.

201920202021202220232024

Critical

High

Medium

Low

Global Rank

#151

of 3,515 researchers

Vulns

Critical0

High8

Medium33

Low0

Affected Assets

39plugins

Avg CVSS

5.7

Average score of vulnerabilities

Researcher Submissions

41 records


2024-10-07 00:00	Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass Limit Login Attempts (Spam Protection) <= 5.3	`CVE-2022-4534`	5.3 Medium	rezaduty	Yes
2024-09-25 00:00	WordPress Visitors <= 1.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Header WordPress Visitors <= 1.0	`CVE-2022-4541`	7.2 High	rezaduty	No
2024-09-18 00:00	Limit Login Attempts Plus <= 1.1.0 - IP Address Spoofing to Protection Mechanism Bypass Limit Login Attempts Plus <= 1.1.0	`CVE-2022-4533`	5.3 Medium	rezaduty	No
2024-09-04 00:00	Security, Antivirus, Firewall – S.A.F <= 2.3.5 - IP Address Spoofing to Protection Mechanism Bypass Security, Antivirus, Firewall <= 2.3.5	`CVE-2022-4529`	5.3 Medium	rezaduty	No
2024-08-30 00:00	Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass Web Application Firewall <= 2.1.2	`CVE-2022-4539`	5.3 Medium	rezaduty	Yes
2024-08-30 00:00	IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass Two-factor authentication (formerly IP… <= 1.1	`CVE-2022-4536`	5.3 Medium	rezaduty	Yes
2024-08-16 00:00	LOGIN AND REGISTRATION ATTEMPTS LIMIT<= 2.1 - IP Address Spoofing to Protection Mechanism Bypass LOGIN AND REGISTRATION ATTEMPTS LIMIT <= 2.1	`CVE-2022-4532`	6.5 Medium	rezaduty	No
2023-05-08 00:00	Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass Hide My WP Ghost <= 5.0.18	`CVE-2022-4537`	6.5 Medium	rezaduty	Yes
2023-04-28 00:00	Bit File Manager <= 5.2.7 - Authenticated (Admin+) PHP Object Injection File Manager <= 5.2.7	`CVE-2022-47599`	7.2 High	rezaduty	Yes
2023-03-15 00:00	Store Locator <= 3.98.7 - Cross-Site Request Forgery to Settings Update Store Locator for WordPress… <= 3.98.7	`CVE-2022-47446`	4.3 Medium	rezaduty	Yes

Showing 1–10 of 41 reports