Shivam Rai

Shivam Rai is a security researcher credited with 16 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #316 of 3,515 contributors. Their disclosures were published between 2021 and 2022. The most productive year was 2021, with 15 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 15 of their findings (94%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 5.5, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes Modern Events Calendar Lite (2), Appointment Hour Booking (1), Chained Quiz (1), across 15 distinct plugins, themes and core versions in total.

15 of the 16 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "NEX-Forms – Ultimate Form Builder <= 8.4.2 - Cross-Site Request Forgery to Cross-Site Scripting", scores 8.8 out of 10.

20212022

Critical

High

Medium

Low

Global Rank

#316

of 3,515 researchers

Vulns

Critical0

High1

Medium15

Low0

Affected Assets

16plugins

Avg CVSS

5.5

Average score of vulnerabilities

Researcher Submissions

16 records


2022-01-03 00:00	SVG Support <= 2.3.19 Admin+ Cross-Site Scripting SVG Support <= 2.3.19	`CVE-2021-24686`	5.5 Medium	Shivam Rai	Yes
2021-11-14 00:00	NEX-Forms – Ultimate Form Builder <= 8.4.2 - Cross-Site Request Forgery to Cross-Site Scripting NEX-Forms <= 8.4.2	`CVE-2021-24705`	8.8 High	Shivam Rai	Yes
2021-10-25 00:00	Video Lessons Manager < 1.7.2 and Video Lessons Manager Pro < 3.5.9 - Stored Cross-Site Scripting CM Video Lessons Manager <= 1.7.1	`CVE-2021-24713`	5.5 Medium	Shivam Rai	Yes
2021-10-20 00:00	Forminator <= 1.15.2 - Admin+ Stored Cross-Site Scripting Forminator Forms < 1.15.4	`CVE-2021-24700`	4.8 Medium	Shivam Rai	Yes
2021-10-11 00:00	Quiz Tool Lite <= 2.3.15 - Authenticated (Admin+) Stored Cross-Site Scripting Quiz Tool Lite <= 2.3.15	`CVE-2021-24701`	4.8 Medium	Shivam Rai	No
2021-10-11 00:00	Qwizcards <= 3.61 - Stored Cross-Site Scripting Qwizcards <= 3.61	`CVE-2021-24706`	5.5 Medium	Shivam Rai	Yes
2021-09-29 00:00	Modern Events Calendar Lite <= 5.22.2 - Authenticated Stored Cross Site Scripting Modern Events Calendar Lite <= 5.22.2	`CVE-2021-24716`	5.4 Medium	Shivam Rai	Yes
2021-09-28 00:00	Restaurant Menu by MotoPress <= 2.4.1 - Admin+ Stored Cross Site Scripting Restaurant Menu and Food Ordering < 2.4.2	`CVE-2021-24722`	5.5 Medium	Shivam Rai	Yes
2021-09-28 00:00	WP Reactions Lite <= 1.3.3 - Cross-Site Scripting WP Reactions Lite < 1.3.6	`CVE-2021-24723`	5.4 Medium	Shivam Rai	Yes
2021-09-20 00:00	LearnPress <= 4.1.3 - Authenticated Stored Cross-Site Scripting LearnPress <= 4.1.3	`CVE-2021-24702`	4.8 Medium	Shivam Rai	Yes

Showing 1–10 of 16 reports