Rio Darmawan

Rio Darmawan is a security researcher credited with 190 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #44 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Scripting, which accounts for 132 of their findings (69%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization. The average CVSS score across these disclosures is 4.6, peaking at 7.5. Severity breakdown: 0 critical and 1 high.

The most affected software includes Advanced Text Widget (2), authLdap (2), Button Generator (2), across 178 distinct plugins, themes and core versions in total.

125 of the 190 disclosed issues have a vendor fix, while 65 remain unpatched.

2023

Critical

High

Medium

Low

Global Rank

#44

of 3,515 researchers

Vulns

190

Critical0

High1

Medium185

Low4

Affected Assets

178

178plugins

Avg CVSS

4.6

Average score of vulnerabilities

Researcher Submissions

190 records


2023-10-25 00:00	SAHU TikTok Pixel for E-Commerce <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting SAHU TikTok Pixel for E-Commerce <= 1.2.2	`CVE-2023-46642`	4.4 Medium	Rio Darmawan	No
2023-10-19 00:00	WC Captcha <= 1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting WC Captcha <= 1.5	`CVE-2023-46210`	4.4 Medium	Rio Darmawan	No
2023-10-18 00:00	Triberr <= 4.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Triberr <= 4.1.1	`CVE-2023-46199`	4.4 Medium	Rio Darmawan	Yes
2023-10-18 00:00	Smart App Banner <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Smart App Banner <= 1.1.3	`CVE-2023-46200`	4.4 Medium	Rio Darmawan	Yes
2023-10-13 00:00	LeadSquared Suite <= 0.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings LeadSquared Suite <= 0.7.4	`CVE-2023-45833`	4.4 Medium	Rio Darmawan	No
2023-10-12 00:00	AGP Font Awesome Collection <= 3.2.4 - Cross-Site Request Forgery AGP Font Awesome Collection <= 3.2.4	`CVE-2023-45749`	4.3 Medium	Rio Darmawan	No
2023-10-12 00:00	Simple Tweet <= 1.4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings Simple Tweet <= 1.4.0.2	`CVE-2023-45767`	5.5 Medium	Rio Darmawan	No
2023-10-12 00:00	Next Page <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings Next Page <= 1.5.2	`CVE-2023-45768`	4.4 Medium	Rio Darmawan	No
2023-10-12 00:00	Easy Testimonial Slider and Form <= 1.0.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings Easy Testimonial Slider and Form <= 1.0.18	`CVE-2023-45754`	4.4 Medium	Rio Darmawan	Yes
2023-10-12 00:00	Constant Contact Forms by MailMunch <= 2.0.10 - Cross-Site Request Forgery Constant Contact Forms by MailMunch <= 2.0.10	`CVE-2023-45647`	4.3 Medium	Rio Darmawan	Yes

Showing 1–10 of 190 reports