Ronnie Skansing

Ronnie Skansing is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #853 of 3,515 contributors. Their disclosures were published between 2016 and 2017. The most productive year was 2017, with 3 findings.

Their research concentrates on Server-Side Request Forgery (SSRF), which accounts for 2 of their findings (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting. The average CVSS score across these disclosures is 7.3, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes WordPress 4.7 (3), WordPress 4.4 (1), across 2 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix. The most severe finding, "WordPress Core < 4.7.1 - Cross-Site Request Forgery via Widget Editing", scores 8.8 out of 10.

20162017

Critical

High

Medium

Low

Global Rank

#853

of 3,515 researchers

Vulns

Critical0

High2

Medium2

Low0

Affected Assets

2core versions

Avg CVSS

7.3

Average score of vulnerabilities

Researcher Submissions

4 records


2017-05-16 00:00	WordPress Core < 4.7.5 - Stored Cross-Site Scripting via filenames WordPress 4.7 3.7.20 – 4.7.4 · 11 branches	`CVE-2017-9061`	6.4 Medium	Ronnie Skansing	Yes
2017-05-16 00:00	WordPress Core < 4.7.5 - Server-Side Request Forgery WordPress 4.7 3.7 – 4.7.4 · 12 branches	`CVE-2017-9066`	7.7 High	Ronnie Skansing	Yes
2017-01-11 00:00	WordPress Core < 4.7.1 - Cross-Site Request Forgery via Widget Editing WordPress 4.7 3.7 – 4.7 · 12 branches	`CVE-2017-5492`	8.8 High	Ronnie Skansing	Yes
2016-02-02 00:00	WordPress Core < 4.4.2 - Server-Side Request Forgery WordPress 4.4 3.7 – 4.4.1 · 9 branches	`CVE-2016-2222`	6.4 Medium	Ronnie Skansing	Yes

Showing 1–4 of 4 reports