Shi Chen (University of Kaiserslautern, Germany)

Shi Chen (University of Kaiserslautern, Germany) is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #433 of 3,515 contributors. The disclosure was published in 2022.

Their research concentrates on SQL Injection, which accounts for 10 of their findings (100%). The average CVSS score across these disclosures is 7.8, peaking at 9.8. Severity breakdown: 1 critical and 9 high.

The most affected software includes Note Press (3), Five Minute Webshop (2), amtyThumb (1), across 7 distinct plugins, themes and core versions in total.

4 of the 10 disclosed issues have a vendor fix, while 6 remain unpatched. The most severe finding, "CP Image Store with Slideshow <= 1.0.67 - Unauthenticated SQL Injection", scores 9.8 out of 10.

2022

Critical

High

Medium

Low

Global Rank

#433

of 3,515 researchers

Vulns

Critical1

High9

Medium0

Low0

Affected Assets

7plugins

Avg CVSS

7.8

Average score of vulnerabilities

Researcher Submissions

10 records


2022-05-09 00:00	Five Minute Webshop <= 1.3.2 - Authenticated (Admin+) SQL Injection via id Five Minute Webshop <= 1.3.2	`CVE-2022-1686`	7.2 High	Shi Chen (University of Kaiserslautern, Germany)	Yes
2022-05-09 00:00	Five Minute Webshop <= 1.3.2 - Authenticated (Admin+) SQL Injection via orderby Five Minute Webshop <= 1.3.2	`CVE-2022-1685`	7.2 High	Shi Chen (University of Kaiserslautern, Germany)	Yes
2022-05-09 00:00	Note Press <= 0.1.10 - Authenticated (Admin+) SQL Injection via id Parameter Note Press <= 0.1.10	`CVE-2022-1690`	7.2 High	Shi Chen (University of Kaiserslautern, Germany)	No
2022-05-09 00:00	Logo Slider <= 1.4.8 - Authenticated (Admin+) SQL Injection Logo Slider <= 1.4.8	`CVE-2022-1687`	7.2 High	Shi Chen (University of Kaiserslautern, Germany)	No
2022-05-09 00:00	Note Press <= 0.1.10 - Authenticated (Admin+) SQL Injection via ids Parameter Note Press <= 0.1.10	`CVE-2022-1688`	7.2 High	Shi Chen (University of Kaiserslautern, Germany)	No
2022-05-09 00:00	CUBE SLIDER <= 1.2 - Authenticated (Admin+) SQL Injection CUBE SLIDER <= 1.2	`CVE-2022-1684`	7.2 High	Shi Chen (University of Kaiserslautern, Germany)	No
2022-05-09 00:00	amtyThumb <= 4.2.0 - Authenticated SQL Injection amtyThumb <= 4.2.0	`CVE-2022-1683`	8.8 High	Shi Chen (University of Kaiserslautern, Germany)	No
2022-05-09 00:00	Realty Workstation <= 1.0.9 - Authenticated SQL Injection Realty Workstation <= 1.0.9	`CVE-2022-1691`	8.8 High	Shi Chen (University of Kaiserslautern, Germany)	Yes
2022-05-09 00:00	CP Image Store with Slideshow <= 1.0.67 - Unauthenticated SQL Injection CP Image Store with Slideshow < 1.0.68	`CVE-2022-1692`	9.8 Critical	Shi Chen (University of Kaiserslautern, Germany)	Yes
2022-05-09 00:00	Note Press <= 0.1.10 - Authenticated (Admin+) SQL Injection via Update Note Press <= 0.1.10	`CVE-2022-1689`	7.2 High	Shi Chen (University of Kaiserslautern, Germany)	No

Showing 1–10 of 10 reports