Thomas Waldegger

Thomas Waldegger is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,096 of 3,515 contributors. Their disclosures were published between 2004 and 2005. The most productive year was 2005, with 2 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 1 of their findings (33%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, SQL Injection. The average CVSS score across these disclosures is 6.7, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes WordPress 1.5 (2), WordPress 1.2 (1), across 2 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix. The most severe finding, "WordPress Core < 1.5.1 - SQL Injection", scores 8.8 out of 10.

20042005

Critical

High

Medium

Low

Global Rank

#1096

of 3,515 researchers

Vulns

Critical0

High1

Medium2

Low0

Affected Assets

2core versions

Avg CVSS

6.7

Average score of vulnerabilities

Researcher Submissions

3 records


2005-05-09 00:00	WordPress Core < 1.5.1 - Full Path Disclosure WordPress 1.5 < 1.5.1	`CVE-2005-1688`	5.3 Medium	Thomas Waldegger	Yes
2005-05-09 00:00	WordPress Core < 1.5.1 - SQL Injection WordPress 1.5 < 1.5.1	`CVE-2005-1687`	8.8 High	Thomas Waldegger	Yes
2004-10-06 00:00	WordPress Core < 1.2.1 - Cross-Site Scripting WordPress 1.2 < 1.2	`CVE-2004-1559`	6.1 Medium	Thomas Waldegger	Yes

Showing 1–3 of 3 reports