Taihei Shimamine

Taihei Shimamine is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #419 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Scripting, which accounts for 6 of their findings (55%). Other recurring categories include Cross-Site Request Forgery (CSRF), External Control Of File Name Or Path. The average CVSS score across these disclosures is 5.0, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes Block Bad Bots and Stop Bad Bots… (1), Block Referer Spam (1), Contact Form by Supsystic (1), across 11 distinct plugins, themes and core versions in total.

10 of the 11 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Rename Media Files <= 1.0.1 - Authenticated (Contributor+) Remote Code Execution", scores 8.8 out of 10.

2023

Critical

High

Medium

Low

Global Rank

#419

of 3,515 researchers

Vulns

Critical0

High1

Medium9

Low1

Affected Assets

11plugins

Avg CVSS

5.0

Average score of vulnerabilities

Researcher Submissions

11 records


2023-12-26 00:00	Media File Renamer <= 5.7.7 - Authenticated(Administrator+) Remote Code Execution Media File Renamer <= 5.7.7	`CVE-2023-50897`	6.6 Medium	Taihei Shimamine	Yes
2023-11-07 00:00	Rename Media Files <= 1.0.1 - Authenticated (Contributor+) Remote Code Execution Rename Media Files <= 1.0.1	`CVE-2023-32095`	8.8 High	Taihei Shimamine	No
2023-10-16 00:00	Custom post types <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting Custom post types, Custom Fields & more <= 5.0.2	`CVE-2023-32116`	4.4 Medium	Taihei Shimamine	Yes
2023-10-03 00:00	Publish Confirm Message <= 1.3.1 - Cross-Site Request Forgery Publish Confirm Message <= 1.3.1	`CVE-2023-32124`	4.3 Medium	Taihei Shimamine	Yes
2023-10-03 00:00	Contact Form by Supsystic <= 1.7.27 - Cross-Site Request Forgery Contact Form by Supsystic <= 1.7.27	`CVE-2023-45068`	4.3 Medium	Taihei Shimamine	Yes
2023-08-11 00:00	WP 404 Auto Redirect to Similar Post <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting WP 404 Auto Redirect to Similar Post <= 1.0.3	`CVE-2023-40206`	5.5 Medium	Taihei Shimamine	Yes
2023-05-31 00:00	TPG Redirect <= 1.0.7 - Cross-Site Request Forgery TPG Redirect <= 1.0.7	`CVE-2023-32093`	4.3 Medium	Taihei Shimamine	Yes
2023-05-10 00:00	Custom Field Suite <= 2.6.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Custom Field Suite <= 2.6.2.1	`CVE-2023-32515`	4.4 Medium	Taihei Shimamine	Yes
2023-05-09 00:00	StopBadBots <= 7.31 - Authenticated (Administrator+) Stored Cross-Site Scripting Block Bad Bots and Stop Bad Bots… <= 7.31	`CVE-2023-32496`	4.4 Medium	Taihei Shimamine	Yes
2023-05-09 00:00	Easy Form by AYS <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Easy Form <= 1.2.0	`CVE-2023-32498`	4.4 Medium	Taihei Shimamine	Yes

Showing 1–10 of 11 reports