Tom Adams

Tom Adams is a security researcher credited with 15 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #330 of 3,515 contributors. Their disclosures were published between 2014 and 2018. The most productive year was 2014, with 11 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 6 of their findings (40%). Other recurring categories include Cross-Site Scripting, SQL Injection. The average CVSS score across these disclosures is 6.6, peaking at 8.8. Severity breakdown: 0 critical and 7 high.

The most affected software includes GD Star Rating (2), Advanced Access Manager (1), Contact Form DB (1), across 14 distinct plugins, themes and core versions in total.

11 of the 15 disclosed issues have a vendor fix, while 4 remain unpatched. The most severe finding, "GD Star Rating <= 1.9.22 - Cross-Site Request Forgery", scores 8.8 out of 10.

20142015201620172018

Critical

High

Medium

Low

Global Rank

#330

of 3,515 researchers

Vulns

Critical0

High7

Medium8

Low0

Affected Assets

13plugins1core version

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

15 records


2018-03-29 00:00	WP Image Zoom <= 1.23 - Cross-Site Request Forgery to Denial of Service WP Image Zoom <= 1.23	`CVE-2018-1000510`	6.5 Medium	Tom Adams	Yes
2017-11-02 00:00	Like Button Rating <= 2.5.3 - Arbitrary Settings Change Like Button Rating ♥ LikeBtn <= 2.5.3	`N/A`	6.5 Medium	Tom Adams	Yes
2015-07-15 00:00	Subscribe to Comments <= 2.1.2 - Local File Includion Subscribe to Comments <= 2.1.2	`CVE-2015-10133`	7.2 High	Tom Adams	Yes
2015-03-04 00:00	Contact Form DB <= 2.8.29 - Cross-site request forgery via a request in the CF7DBPluginSubmissions page to wp-admin/admin.php Contact Form DB <= 2.8.29	`CVE-2015-1874`	4.3 Medium	Tom Adams	Yes
2014-09-17 00:00	WooCommerce <= 2.2.2 - Reflected Cross-Site Scripting WooCommerce < 2.2.3	`N/A`	6.1 Medium	Tom Adams	Yes
2014-09-17 00:00	WP-Ban < 1.64 - Improper Input Validation WP-Ban < 1.64	`CVE-2014-6230`	5.3 Medium	Mallory Adams	Yes
2014-08-20 00:00	Advanced Access Manager <= 2.8.2 - Arbitrary File Overwrite Advanced Access Manager < 2.8.3	`CVE-2014-6059`	7.2 High	Tom Adams	Yes
2014-08-01 00:00	WP HTML Sitemap <= 1.2 - Cross-Site Request Forgery wp-html-sitemap <= 1.2	`CVE-2014-2675`	6.5 Medium	Tom Adams	No
2014-06-10 00:00	Member Approval <= 131109 - Cross-Site Scripting Member Approval <= 131109	`CVE-2014-3850`	6.1 Medium	Mallory Adams	No
2014-06-10 00:00	JW Player for Flash & HTML5 Video < 2.1.4 - Cross-Site Request Forgery leading to player deletion JW Player for Flash & HTML5 Video < 2.1.4	`CVE-2014-4030`	4.3 Medium	Tom Adams	Yes

Showing 1–10 of 15 reports