Thinkland Security Team

Thinkland Security Team is a security researcher credited with 23 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #230 of 3,515 contributors. The disclosure was published in 2021.

Their research concentrates on Cross-Site Scripting, which accounts for 21 of their findings (91%). Other recurring categories include Cross-Site Request Forgery (CSRF), Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 5.8, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Easy Digital Downloads (2), Author Bio Box (1), Catch Themes Demo Import (1), across 22 distinct plugins, themes and core versions in total.

16 of the 23 disclosed issues have a vendor fix, while 7 remain unpatched. The most severe finding, "Easy Registration Forms <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting", scores 8.8 out of 10.

2021

Critical

High

Medium

Low

Global Rank

#230

of 3,515 researchers

Vulns

Critical0

High2

Medium21

Low0

Affected Assets

22plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

23 records


2021-11-18 16:42	Easy Registration Forms <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting Easy Registration Forms <= 2.1.1	`CVE-2021-39353`	8.8 High	Thinkland Security Team	No
2021-11-01 10:32	Google Maps Easy <= 1.9.33 - Stored Cross-Site Scripting Easy Google Maps <= 1.9.33	`CVE-2021-39346`	4.8 Medium	Thinkland Security Team	Yes
2021-10-25 00:00	Notification – Custom Notifications and Alerts for WordPress <= 7.2.4 - Authenticated Stored Cross-Site Scripting Notification <= 7.2.4	`CVE-2021-39340`	5.5 Medium	Thinkland Security Team	Yes
2021-10-21 16:05	Simple Job Board <= 2.9.4 Authenticated Stored Cross-Site Scripting Simple Job Board <= 2.9.4	`CVE-2021-39328`	5.5 Medium	Thinkland Security Team	Yes
2021-10-21 16:05	Easy Digital Downloads <= 2.11.2 - Reflected Cross-Site Scripting Easy Digital Downloads <= 2.11.2	`CVE-2021-39354`	4.8 Medium	Thinkland Security Team	Yes
2021-10-21 16:05	Catch Themes Demo Import <= 1.7 - Arbitrary File Upload Catch Themes Demo Import <= 1.7	`CVE-2021-39352`	7.2 High	Thinkland Security Team	Yes
2021-10-19 00:00	Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.11.2 - Reflected Cross-Site Scripting Easy Digital Downloads <= 2.11.2	`N/A`	5.4 Medium	Thinkland Security Team	Yes
2021-10-18 17:16	LearnPress <= 4.1.3.1 - Stored Cross-Site Scripting via $custom_profile LearnPress <= 4.1.3.1	`CVE-2021-39348`	5.5 Medium	Thinkland Security Team	Yes
2021-10-18 00:00	Leaky Paywall <= 4.16.5 Authenticated Stored Cross-Site Scripting Leaky Paywall <= 4.16.5	`CVE-2021-39357`	5.5 Medium	Thinkland Security Team	Yes
2021-10-15 19:23	MPL-Publisher <= 1.30.2 - Authenticated (Admin+) Stored Cross-Site Scripting MPL-Publisher <= 1.30.2	`CVE-2021-39343`	5.5 Medium	Thinkland Security Team	Yes

Showing 1–10 of 23 reports