Thomas Chauchefoin

Thomas Chauchefoin is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #739 of 3,515 contributors. Their disclosures were published between 2018 and 2022. The most productive year was 2019, with 2 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (40%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Server-Side Request Forgery (SSRF). The average CVSS score across these disclosures is 7.2, peaking at 9.8. Severity breakdown: 2 critical and 0 high.

The most affected software includes Duplicator (1), Social Preview and Open Graph Tags (1), W3 Total Cache (1), across 5 distinct plugins, themes and core versions in total.

4 of the 5 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "WP Statistics <= 12.6.6.1 - Unauthenticated Blind SQL Injection", scores 9.8 out of 10.