RIPS Technologies

RIPS Technologies is a security researcher credited with 13 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #354 of 3,515 contributors. Their disclosures were published between 2016 and 2019. The most productive year was 2018, with 9 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 7 of their findings (54%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 7.1, peaking at 8.8. Severity breakdown: 0 critical and 6 high.

The most affected software includes WPForms (2), All in One SEO (1), Jetpack (1), across 12 distinct plugins, themes and core versions in total.

All 13 disclosed issues have since received a vendor fix. The most severe finding, "Redirection <= 3.6.3 - Cross-Site Request Forgery to Remote Code Execution", scores 8.8 out of 10.

2016201720182019

Critical

High

Medium

Low

Global Rank

#354

of 3,515 researchers

Vulns

Critical0

High6

Medium7

Low0

Affected Assets

11plugins1core version

Avg CVSS

7.1

Average score of vulnerabilities

Researcher Submissions

13 records


2019-11-09 00:00	MC4WP: Mailchimp for WordPress <= 4.1.6 - Reflected Cross-Site Scripting MC4WP <= 4.1.6	`N/A`	6.1 Medium	RIPS Technologies	Yes
2019-02-19 00:00	WordPress Core <= 5.0.3 - Path Traversal and Local File Inclusion WordPress 5.0 <= 5.0.2	`CVE-2019-8943`	6.5 Medium	Wilfried Becard	Yes
2019-01-07 00:00	WP Job Manager <= 1.31.2 - PHP Object Injection via PHAR Deserialization WP Job Manager < 1.31.3	`N/A`	7.5 High	RIPS Technologies	Yes
2018-12-11 00:00	Jetpack <= 6.4.2 - Cross-Site Scripting via post_meta Jetpack <= 6.4.2	`N/A`	5.4 Medium	RIPS Technologies	Yes
2018-12-10 00:00	Contact Form by WPForms <= 1.4.8 - Reflected Cross-Site Scripting WPForms < 1.4.8.1	`N/A`	7.1 High	RIPS Technologies	Yes
2018-11-14 00:00	Redirection <= 3.6.3 - Cross-Site Request Forgery to Remote Code Execution Redirection <= 3.6.3	`N/A`	8.8 High	RIPS Technologies	Yes
2018-10-22 00:00	WP-DBManager <= 2.79.1 - Directory Traversal Allowing Arbitrary File Deletion WP-DBManager < 2.79.2	`N/A`	8.7 High	RIPS Technologies	Yes
2018-10-18 00:00	All in One SEO <= 2.9.1.1 - Authenticated Stored Cross-Site Scripting All in One SEO < 2.10	`N/A`	6.4 Medium	RIPS Technologies	Yes
2018-09-19 00:00	WP Mail SMTP by WPForms <= 1.3.3 - Unspecified Cross-Site Scripting WP Mail SMTP by WPForms < 1.4.0	`N/A`	6.4 Medium	RIPS Technologies	Yes
2018-09-18 00:00	MonsterInsights – Google Analytics Dashboard for WordPress <= 7.1 - Stored Cross-Site Scripting MonsterInsights <= 7.1	`N/A`	6.4 Medium	RIPS Technologies	Yes

Showing 1–10 of 13 reports