Sharanabasappa

Sharanabasappa is a security researcher credited with 20 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #263 of 3,515 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2024, with 19 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 18 of their findings (90%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 4.5, peaking at 5.5.

The most affected software includes Bus Ticket Booking with Seat Reservation (2), Comments Evolved for WordPress (1), Configure Login Timeout (1), across 19 distinct plugins, themes and core versions in total.

7 of the 20 disclosed issues have a vendor fix, while 13 remain unpatched.

20242025

Critical

High

Medium

Low

Global Rank

#263

of 3,515 researchers

Vulns

Critical0

High0

Medium20

Low0

Affected Assets

19plugins

Avg CVSS

4.5

Average score of vulnerabilities

Researcher Submissions

20 records


2025-01-06 00:00	Bus Ticket Booking with Seat Reservation <= 5.4.3 - Cross-Site Request Forgery Bus Ticket Booking with Seat Reservation <= 5.4.3	`CVE-2024-49294`	4.3 Medium	Sharanabasappa	Yes
2024-10-14 00:00	WP-Spreadplugin <= 4.8.9 - Authenticated (Administrator+) Stored Cross-Site Scripting WP-Spreadplugin <= 4.8.9	`CVE-2024-49266`	5.5 Medium	Sharanabasappa	No
2024-09-25 00:00	Salon booking system <= 10.9 - Authenticated (Subscriber+) Insecure Direct Object Reference Salon Booking System <= 10.9	`CVE-2024-47316`	4.3 Medium	Sharanabasappa	Yes
2024-09-23 00:00	WP Travel <= 9.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Travel <= 9.3.1	`CVE-2024-44039`	4.4 Medium	Sharanabasappa	Yes
2024-08-29 00:00	Taxi Booking Manager for WooCommerce – WordPress plugin \| Ecab <= 1.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting E-cab Taxi Booking Manager… <= 1.0.9	`CVE-2024-43986`	4.0 Medium	Sharanabasappa	Yes
2024-08-28 00:00	PageLayer <= 1.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting Page Builder: Pagelayer <= 1.8.7	`CVE-2024-43972`	4.4 Medium	Sharanabasappa	Yes
2024-08-28 00:00	Bus Ticket Booking with Seat Reservation <= 5.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting Bus Ticket Booking with Seat Reservation <= 5.3.5	`CVE-2024-43985`	4.4 Medium	Sharanabasappa	Yes
2024-07-06 00:00	Link To Bible <= 2.5.9 - Authenticated (Administrator+) Stored Cross-Site Scripting Link To Bible <= 2.5.9	`CVE-2024-37538`	4.4 Medium	Sharanabasappa	Yes
2024-07-06 00:00	Simple Social Share <= 3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Simple Social Share <= 3.0	`CVE-2024-37551`	4.4 Medium	Sharanabasappa	No
2024-07-06 00:00	WordPress Notification Bar <= 1.3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting WordPress Notification Bar <= 1.3.10	`CVE-2024-37556`	4.4 Medium	Sharanabasappa	No

Showing 1–10 of 20 reports