SecuPress

SecuPress is a security researcher credited with 6 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #660 of 3,515 contributors. Their disclosures were published between 2015 and 2016. The most productive year was 2016, with 4 findings.

Their research concentrates on Authentication Bypass By Primary Weakness, which accounts for 1 of their findings (17%). Other recurring categories include Code Injection, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.6, peaking at 8.8. Severity breakdown: 0 critical and 3 high.

The most affected software includes W3 Total Cache (4), WP Rollback (2), across 2 distinct plugins, themes and core versions in total.

All 6 disclosed issues have since received a vendor fix. The most severe finding, "W3 Total Cache <= 0.9.4.1 - Arbitrary File Upload", scores 8.8 out of 10.

20152016

Critical

High

Medium

Low

Global Rank

#660

of 3,515 researchers

Vulns

Critical0

High3

Medium2

Low1

Affected Assets

2plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

6 records


2016-09-26 00:00	W3 Total Cache <= 0.9.4.1 - Security Token Bypass via Type Juggling W3 Total Cache <= 0.9.4.1	`N/A`	3.7 Low	SecuPress	Yes
2016-09-26 00:00	W3 Total Cache <= 0.9.4.1 - Arbitrary File Upload W3 Total Cache <= 0.9.4.1	`N/A`	8.8 High	SecuPress	Yes
2016-09-26 00:00	W3 Total Cache <= 0.9.4.1 - Authenticated Arbitrary File Download W3 Total Cache <= 0.9.4.1	`N/A`	4.9 Medium	SecuPress	Yes
2016-09-26 00:00	W3 Total Cache <= 0.9.4.1 - Arbitrary Code Execution via settings import W3 Total Cache <= 0.9.4.1	`N/A`	7.2 High	SecuPress	Yes
2015-06-28 00:00	WP Rollback < 1.2.3 - Cross-Site Scripting WP Rollback < 1.2.3	`CVE-2015-9342`	6.1 Medium	SecuPress	Yes
2015-06-28 00:00	Rollback < 1.2.3 - Cross-Site Request Forgery WP Rollback < 1.2.3	`CVE-2015-9343`	8.8 High	SecuPress	Yes

Showing 1–6 of 6 reports