Ricardo Sanchez

Ricardo Sanchez is a security researcher credited with 24 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #222 of 3,515 contributors. Their disclosures were published between 2017 and 2020. The most productive year was 2017, with 15 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 23 of their findings (96%). Other recurring categories include Path Traversal. The average CVSS score across these disclosures is 6.1, peaking at 7.1. Severity breakdown: 0 critical and 2 high.

The most affected software includes 2kb Amazon Affiliates Store (1), Affiliate Ads for Clickbank Products (1), AMP Toolbox (1), across 24 distinct plugins, themes and core versions in total.

20 of the 24 disclosed issues have a vendor fix, while 4 remain unpatched.

2017201820192020

Critical

High

Medium

Low

Global Rank

#222

of 3,515 researchers

Vulns

Critical0

High2

Medium22

Low0

Affected Assets

24plugins

Avg CVSS

6.1

Average score of vulnerabilities

Researcher Submissions

24 records


2020-01-16 00:00	Resim Ara <= 1.0 - Reflected Cross-Site Scripting Resim Ara <= 1.0	`N/A`	6.1 Medium	Ricardo Sanchez	No
2019-09-11 00:00	Human Presence – Stop Form Spam Without ReCaptcha < 2.0.9 - Reflected Cross-Site Scripting Human Presence < 2.0.9	`N/A`	7.1 High	Ricardo Sanchez	Yes
2019-09-10 00:00	Checklist <= 1.1.8 - Cross-Site Scripting Checklist <= 1.1.8	`CVE-2019-16525`	6.1 Medium	Ricardo Sanchez	Yes
2019-09-07 00:00	Qwiz Online Quizzes and Flashcards < 3.37 - Reflected Cross Site Scripting Qwizcards < 3.37	`N/A`	6.1 Medium	Ricardo Sanchez	Yes
2019-09-05 00:00	ECPay Logistics for WooCommerce <= 1.2.181030 - Reflected Cross-Site Scripting ECPay Logistics for WooCommerce <= 1.2.181030	`N/A`	6.1 Medium	Ricardo Sanchez	Yes
2019-09-05 00:00	API Bearer Auth < 20190907 - Cross-Site Scripting API Bearer Auth < 20190907	`CVE-2019-16332`	6.1 Medium	Ricardo Sanchez	Yes
2019-09-04 00:00	Spryng Payments for WooCommerce <= 1.6.7 - Cross-Site Scripting Spryng Payments for WooCommerce <= 1.6.7	`N/A`	6.1 Medium	Ricardo Sanchez	No
2019-09-03 00:00	Portrait-Archiv.com Photostore < 3.2 - Reflected Cross-Site Scripting Portrait-Archiv Photostore < 3.2	`N/A`	6.1 Medium	Ricardo Sanchez	Yes
2018-01-31 00:00	PropertyHive < 1.4.15 - Cross-Site Scripting Property Hive < 1.4.15	`CVE-2018-6465`	6.1 Medium	Ricardo Sanchez	Yes
2017-12-18 00:00	Share This Image < 1.04 - Cross-Site Scripting Share This Image < 1.04	`CVE-2017-18015`	6.1 Medium	Ricardo Sanchez	Yes

Showing 1–10 of 24 reports