Simon Scannell

Simon Scannell is a security researcher credited with 13 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #357 of 3,515 contributors. Their disclosures were published between 2018 and 2022. The most productive year was 2019, with 5 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (31%). Other recurring categories include Cross-Site Request Forgery (CSRF), Improper Authorization. The average CVSS score across these disclosures is 6.6, peaking at 9.6. Severity breakdown: 1 critical and 5 high.

The most affected software includes WordPress 5.0 (2), WordPress 5.2 (2), WordPress 5.3 (2), across 9 distinct plugins, themes and core versions in total.

12 of the 13 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "WordPress Core < 5.1.1 - Cross-Site Request Forgery to Cross-Site Scripting via Comments", scores 9.6 out of 10.

20182019202020212022

Critical

High

Medium

Low

Global Rank

#357

of 3,515 researchers

Vulns

Critical1

High5

Medium6

Low1

Affected Assets

2plugins6core versions

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

13 records


2022-10-18 00:00	WordPress Core < 6.0.3 - Cross-Site Request Forgery via wp-trackback.php WordPress 6.0 3.6.1 – 6.0.2 · 25 branches	`N/A`	8.8 High	Simon Scannell	Yes
2022-09-06 00:00	WordPress Core - All known versions - Unauthenticated Blind Server Side Request Forgery WordPress WordPress *	`CVE-2022-3590`	4.0 Medium	Simon Scannell	No
2022-01-06 00:00	WordPress Core < 5.8.3 - Super Admin Multi-Site Installation Object Injection WordPress 5.8 3.7 – < 5.8.3 · 22 branches	`CVE-2022-21663`	6.6 Medium	Simon Scannell	Yes
2022-01-06 00:00	WordPress Core < 5.8.3 - Authenticated (Author+) Stored Cross Site Scripting WordPress 5.8 3.7 – < 5.8.3 · 22 branches	`CVE-2022-21662`	8.0 High	Simon Scannell	Yes
2020-06-10 00:00	WordPress Core < 5.4.2 - Arbitrary User Meta Update WordPress 5.3 3.7 – 5.3.3 · 18 branches	`CVE-2020-4050`	3.5 Low	Simon Scannell	Yes
2019-12-13 00:00	WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting WordPress 5.3 3.7 – 5.3 · 18 branches	`CVE-2019-20042`	6.4 Medium	Simon Scannell	Yes
2019-09-05 00:00	WordPress Core < 5.2.3 - Authenticated Cross-Site Scripting via Post Previews WordPress 5.2 3.7 – 5.2.2 · 17 branches	`CVE-2019-16223`	5.4 Medium	Simon Scannell	Yes
2019-09-05 00:00	WordPress Core < 5.2.3 - Stored Cross-Site Scripting via Comments WordPress 5.2 3.7 – 5.2.2 · 17 branches	`CVE-2019-16218`	7.2 High	Simon Scannell	Yes
2019-04-12 00:00	WordPress Core < 5.1.1 - Cross-Site Request Forgery to Cross-Site Scripting via Comments WordPress 5.1 3.7 – 5.1 · 16 branches	`CVE-2019-9787`	9.6 Critical	Simon Scannell	Yes
2019-02-19 00:00	WordPress Core < 5.0.1 - Remote Code Execution WordPress 5.0 3.7 – 5.0 · 15 branches	`CVE-2019-8942`	8.8 High	Simon Scannell	Yes

Showing 1–10 of 13 reports