Syed Sheeraz Ali

Syed Sheeraz Ali is a security researcher credited with 21 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #241 of 3,515 contributors. The disclosure was published in 2021.

Their research concentrates on SQL Injection, which accounts for 21 of their findings (100%). The average CVSS score across these disclosures is 7.6, peaking at 8.8. Severity breakdown: 0 critical and 21 high.

The most affected software includes Cashtomer (1), Comment Highlighter (1), Display Users (1), across 21 distinct plugins, themes and core versions in total.

4 of the 21 disclosed issues have a vendor fix, while 17 remain unpatched. The most severe finding, "WP Board <= 1.1(Beta) - Authenticated (Admin+) SQL Injection", scores 8.8 out of 10.

2021

Critical

High

Medium

Low

Global Rank

#241

of 3,515 researchers

Vulns

Critical0

High21

Medium0

Low0

Affected Assets

21plugins

Avg CVSS

7.6

Average score of vulnerabilities

Researcher Submissions

21 records


2021-10-07 00:00	G Auto-Hyperlink <= 1.0.1 - Authenticated (Admin+) SQL Injection G Auto-Hyperlink <= 1.0.1	`CVE-2021-24627`	7.2 High	Syed Sheeraz Ali	No
2021-08-22 00:00	WP iCommerce – the first interactive ecommerce for wordpress <= 1.1.1 - Authenticated (Admin+) SQL Injection WP iCommerce <= 1.1.1	`CVE-2021-24402`	7.2 High	Syed Sheeraz Ali	No
2021-08-22 00:00	WP Board <= 1.1(Beta) - Authenticated (Admin+) SQL Injection WP-Board <= 1.1(Beta)	`CVE-2021-24404`	8.8 High	Syed Sheeraz Ali	No
2021-08-22 00:00	GSEOR – WordPress SEO Plugin <= 1.3 - Authenticated (Admin+) SQL Injection GSEOR <= 1.3	`CVE-2021-24396`	7.2 High	Syed Sheeraz Ali	No
2021-08-22 00:00	Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More < 3.3.1.0 - Authenticated SQL Injection via product_id Parameter Product Feed on WooCommerce for Google < 3.3.1.0	`CVE-2021-24511`	7.2 High	Syed Sheeraz Ali	Yes
2021-08-22 00:00	Display Users <= 2.0.0 - Authenticated (Admin+) SQL Injection Display Users <= 2.0.0	`CVE-2021-24400`	7.2 High	Syed Sheeraz Ali	No
2021-08-22 00:00	The Sorter <= 1.0 - Authenticated (Admin+) SQL Injection The Sorter <= 1.0	`CVE-2021-24399`	7.2 High	Syed Sheeraz Ali	No
2021-08-22 00:00	MicroCopy <= 1.1.0 - Authenticated (Admin+) SQL Injection MicroCopy <= 1.1.0	`CVE-2021-24397`	7.2 High	Syed Sheeraz Ali	No
2021-08-22 00:00	WordPress Page Contact <= 1.0 - Authenticated (Admin+) SQL Injection WordPress Page Contact <= 1.0	`CVE-2021-24403`	8.8 High	Syed Sheeraz Ali	No
2021-08-22 00:00	Responsive 3D Slider <= 1.2 - Authenticated (Admin+) SQL Injection RESPONSIVE 3D SLIDER <= 1.2	`CVE-2021-24398`	7.2 High	Syed Sheeraz Ali	No

Showing 1–10 of 21 reports