Torben Jensen

Torben Jensen is a security researcher credited with 26 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #207 of 3,515 contributors. Their disclosures were published between 2012 and 2014. The most productive year was 2012, with 22 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 24 of their findings (92%). Other recurring categories include SQL Injection. The average CVSS score across these disclosures is 6.5, peaking at 9.8. Severity breakdown: 1 critical and 6 high.

The most affected software includes WP Forum Server (3), Newsletter Manager (2), Sharebar (2), across 22 distinct plugins, themes and core versions in total.

23 of the 26 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "Sharebar <= 1.2.1 - SQL Injection", scores 9.8 out of 10.

201220132014

Critical

High

Medium

Low

Global Rank

#207

of 3,515 researchers

Vulns

Critical1

High6

Medium19

Low0

Affected Assets

22plugins

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

26 records


2014-08-01 00:00	Subscribe2 – Form, Email Subscribers & Newsletters < 8.1 - Multiple Cross-Site Scripting Subscribe2 < 8.1	`N/A`	7.1 High	Heine Pedersen	Yes
2014-08-01 00:00	Download Manager <= 2.2.2 - Cross-Site Scripting Download Manager <= 2.2.2	`N/A`	6.1 Medium	Heine Pedersen	Yes
2014-08-01 00:00	Media Library Categories <= 1.1.1 - Unauthenticated Multiple Cross-Site Scripting Media Library Categories <= 1.1.1	`CVE-2012-6630`	6.1 Medium	Heine Pedersen	No
2014-08-01 00:00	WP Easy Gallery <= 1.7 - Cross-Site Scripting WP Easy Gallery <= 1.7	`N/A`	6.1 Medium	Heine Pedersen	Yes
2012-05-15 00:00	PDF & Print Button Joliprint <= 1.3.0 - Cross-Site Scripting PDF & Print Button Joliprint <= 1.3.0	`N/A`	7.1 High	Heine Pedersen	Yes
2012-05-15 00:00	EZPZ One Click Backup <= 12.03.10 - Cross-Site Scripting EZPZ One Click Backup <= 12.03.10	`N/A`	6.1 Medium	Heine Pedersen	No
2012-05-15 00:00	WP Statistics <= 2.2.4 - Cross-Site Scripting WP Statistics <= 2.2.4	`N/A`	6.1 Medium	Heine Pedersen	Yes
2012-05-15 00:00	Newsletter Manager < 1.0.2 - Cross-Site Scripting Newsletter Manager < 1.0.2	`CVE-2012-6628`	6.1 Medium	Heine Pedersen	Yes
2012-05-15 00:00	WP Forum Server < 1.7.4 - SQL Injection WP Forum Server < 1.7.4	`CVE-2012-6625`	7.2 High	Heine Pedersen	Yes
2012-05-15 00:00	Dynamic Widgets <= 1.5.1 - Cross Site Scripting Dynamic Widgets <= 1.5.1	`N/A`	7.2 High	Heine Pedersen	Yes

Showing 1–10 of 26 reports