Sipke Mellema

Sipke Mellema is a security researcher credited with 7 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #583 of 3,515 contributors. Their disclosures were published between 2016 and 2017. The most productive year was 2016, with 6 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 6 of their findings (86%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.6, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes Image Gallery - Responsive Photo Gallery (1), MailPoet Newsletters (Previous) (1), Smash Balloon Social Photo Feed (1), across 7 distinct plugins, themes and core versions in total.

All 7 disclosed issues have since received a vendor fix. The most severe finding, "WordPress Core < 4.7.3 - Cross-Site Request Forgery via Press This", scores 8.8 out of 10.

20162017

Critical

High

Medium

Low

Global Rank

#583

of 3,515 researchers

Vulns

Critical0

High1

Medium6

Low0

Affected Assets

6plugins1core version

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

7 records


2017-03-06 00:00	WordPress Core < 4.7.3 - Cross-Site Request Forgery via Press This WordPress 4.7 3.7 – 4.7.2 · 12 branches	`CVE-2017-6819`	8.8 High	Sipke Mellema	Yes
2016-11-23 00:00	Image Gallery - Responsive Photo Gallery < 2.0.6 - Authenticated Stored Cross-Site Scripting Image Gallery - Responsive Photo Gallery < 2.0.6	`N/A`	5.5 Medium	Sipke Mellema	Yes
2016-11-19 00:00	Smash Balloon Social Photo Feed <= 1.4.6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting Smash Balloon Social Photo Feed <= 1.4.6.2	`N/A`	6.4 Medium	Sipke Mellema	Yes
2016-11-10 00:00	WP Google Maps <= 6.3.14 - Stored Cross-Site Scripting WP Go Maps <= 6.3.14	`N/A`	6.4 Medium	Sipke Mellema	Yes
2016-09-10 00:00	MailPoet Newsletters <= 2.7.2 - Reflected Cross-Site Scripting MailPoet Newsletters (Previous) <= 2.7.2	`N/A`	6.5 Medium	Sipke Mellema	Yes
2016-07-29 00:00	W3 Total Cache <= 0.9.4.1 - Cross-Site Scripting via request_id W3 Total Cache <= 0.9.4.1	`N/A`	6.1 Medium	Sipke Mellema	Yes
2016-07-26 00:00	WooCommerce <= 2.6.3 - Stored Cross-Site Scripting via REST-API WooCommerce < 2.6.4	`N/A`	6.4 Medium	Sipke Mellema	Yes

Showing 1–7 of 7 reports