TEAM WEBoB of BoB 11th

TEAM WEBoB of BoB 11th is a security researcher credited with 17 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #292 of 3,515 contributors. Their disclosures were published between 2022 and 2023. The most productive year was 2023, with 16 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 16 of their findings (94%). Other recurring categories include SQL Injection. The average CVSS score across these disclosures is 5.6, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Advanced Form Integration (1), alfred24 Click & Collect (1), ARMember (1), across 17 distinct plugins, themes and core versions in total.

14 of the 17 disclosed issues have a vendor fix, while 3 remain unpatched.

20222023

Critical

High

Medium

Low

Global Rank

#292

of 3,515 researchers

Vulns

Critical0

High1

Medium16

Low0

Affected Assets

17plugins

Avg CVSS

5.6

Average score of vulnerabilities

Researcher Submissions

17 records


2023-05-10 00:00	Booking Ultra Pro <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting Booking Ultra Pro Appointments Booking… <= 1.1.8	`CVE-2023-32236`	7.2 High	TEAM WEBoB of BoB 11th	Yes
2023-04-19 00:00	ARMember <= 4.0 - Reflected Cross-Site Scripting ARMember <= 4.0	`CVE-2022-47140`	6.1 Medium	TEAM WEBoB of BoB 11th	Yes
2023-04-19 00:00	Charitable <= 1.7.0.10 - Reflected Cross-Site Scripting Charitable <= 1.7.0.10	`CVE-2022-47441`	6.1 Medium	TEAM WEBoB of BoB 11th	Yes
2023-04-19 00:00	Yatra <= 2.1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting Yatra <= 2.1.14	`CVE-2022-47436`	4.4 Medium	TEAM WEBoB of BoB 11th	Yes
2023-04-14 00:00	Booqable Rental Plugin <= 2.4.15 - Authenticated (Administrator+) Stored Cross-Site Scripting Booqable Rental Plugin <= 2.4.15	`CVE-2023-30746`	4.4 Medium	TEAM WEBoB of BoB 11th	Yes
2023-03-28 00:00	Woocommerce Custom Checkout Fields Editor With Drag & Drop <= 0.1 - Reflected Cross-Site Scripting via 'tab' Woocommerce Custom Checkout Fields… <= 0.1	`CVE-2022-46864`	6.1 Medium	TEAM WEBoB of BoB 11th	No
2023-03-28 00:00	Product Specifications for Woocommerce <= 0.6.0 - Reflected Cross-Site Scripting via Arbitrary Query String Parameter Product Specifications for Woocommerce <= 0.6.0	`CVE-2022-46858`	6.1 Medium	TEAM WEBoB of BoB 11th	Yes
2023-03-15 00:00	WSB Brands <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via $logo WSB Brands <= 1.1.8	`CVE-2022-47437`	4.4 Medium	TEAM WEBoB of BoB 11th	Yes
2023-03-15 00:00	Be POPIA Compliant <= 1.2.0 - Authenticated (Subscriber+) SQL Injection Be POPIA Compliant <= 1.2.0	`CVE-2022-47445`	6.5 Medium	TEAM WEBoB of BoB 11th	Yes
2023-03-05 00:00	Jetpack CRM <= 5.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting Jetpack CRM <= 5.4.4	`CVE-2023-27429`	4.4 Medium	TEAM WEBoB of BoB 11th	Yes

Showing 1–10 of 17 reports