The Black Devils

The Black Devils is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #477 of 3,515 contributors. Their disclosures were published between 2012 and 2015. The most productive year was 2012, with 5 findings.

Their research concentrates on Exposure Of Sensitive Information To An Unauthorized Actor, which accounts for 4 of their findings (44%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Cross-Site Scripting. The average CVSS score across these disclosures is 7.3, peaking at 9.8. Severity breakdown: 3 critical and 2 high.

The most affected software includes Sandbox (2), appius (1), BuddyPress BP Gallery Plus (1), across 8 distinct plugins, themes and core versions in total.

1 of the 9 disclosed issues have a vendor fix, while 8 remain unpatched. The most severe finding, "Sandbox <= 1.6.1 - Arbitrary File Upload", scores 9.8 out of 10.

2012201320142015

Critical

High

Medium

Low

Global Rank

#477

of 3,515 researchers

Vulns

Critical3

High2

Medium4

Low0

Affected Assets

3plugins5themes

Avg CVSS

7.3

Average score of vulnerabilities

Researcher Submissions

9 records


2015-05-15 00:00	BuddyPress BP Gallery Plus <= 1.2.5 - Cross-Site Scripting BuddyPress BP Gallery Plus <= 1.2.5	`N/A`	7.1 High	The Black Devils	No
2013-01-30 00:00	Homepage SlideShow <= 2.3 - Arbitrary File Upload Homepage SlideShow <= 2.3	`N/A`	8.3 High	The Black Devils	No
2013-01-25 00:00	Sandbox <= 1.6.1 - Arbitrary File Upload Sandbox <= 1.6.1	`N/A`	9.8 Critical	The Black Devils	No
2013-01-25 00:00	Sandbox <= 1.6.1 - Full Path Disclosure Sandbox <= 1.6.1	`N/A`	5.3 Medium	The Black Devils	No
2012-12-30 00:00	sintic_gallery (All Known Versions) - Arbitrary File Upload sintic_gallery *	`N/A`	9.8 Critical	The Black Devils	No
2012-12-24 00:00	Appius Theme <= 1.0 - Full Path Disclosure appius < 1.1	`N/A`	5.3 Medium	The Black Devils	Yes
2012-12-04 00:00	Vithy (Unknown Versions) - Full Path Disclosure Vithy *	`N/A`	5.3 Medium	The Black Devils	No
2012-12-04 00:00	onepagewebsite (Unknown Versions) - Full Path Disclosure onepagewebsite *	`N/A`	5.3 Medium	The Black Devils	No
2012-03-26 00:00	MoneyMasters (All Versions) - Arbitrary File Upload MoneyMasters *	`N/A`	9.8 Critical	The Black Devils	No

Showing 1–9 of 9 reports