Unknown

Unknown is a security researcher credited with 13 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #358 of 3,515 contributors. Their disclosures were published between 2016 and 2022. The most productive year was 2022, with 7 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 8 of their findings (62%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.5, peaking at 9.3. Severity breakdown: 1 critical and 3 high.

The most affected software includes Easy Social Icons (2), Ad Invalid Click Protector (AICP) (1), Appointment Booking Calendar Plugin… (1), across 12 distinct plugins, themes and core versions in total.

All 13 disclosed issues have since received a vendor fix. The most severe finding, "Better Search < 2.2.3 - SQL Injection", scores 9.3 out of 10.

2016201720182019202020212022

Critical

High

Medium

Low

Global Rank

#358

of 3,515 researchers

Vulns

Critical1

High3

Medium9

Low0

Affected Assets

12plugins

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

13 records


2022-04-11 00:00	Easy Social Icons <= 3.1.4 - Admin+ Cross-Site Scripting Easy Social Icons <= 3.1.4	`N/A`	5.5 Medium	Unknown	Yes
2022-04-11 00:00	Easy Social Icons <= 3.2.2 - Admin+ Cross-Site Scripting Easy Social Icons <= 3.2.2	`N/A`	5.5 Medium	Unknown	Yes
2022-04-08 00:00	BookingPress – Appointments Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.13 - SQL Injection Appointment Booking Calendar Plugin… <= 1.0.13	`N/A`	6.4 Medium	Unknown	Yes
2022-04-08 00:00	Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.39 - Cross-Site Scripting Brevo <= 3.1.39	`N/A`	7.2 High	Unknown	Yes
2022-04-06 00:00	Unify <= 3.2.5 - Cross-Site Scripting Unify <= 3.2.5	`N/A`	7.2 High	Unknown	Yes
2022-04-06 00:00	eRoom – Zoom Meetings & Webinar <= 1.3.7 - Unauthorized Setting Update eRoom <= 1.3.7	`N/A`	5.4 Medium	Unknown	Yes
2022-04-05 00:00	Ad Invalid Click Protector (AICP) <= 1.2.5.2 - Reflected Cross-Site Scripting and Cross-Site Request Forgery Ad Invalid Click Protector (AICP) <= 1.2.5.2	`N/A`	6.1 Medium	Unknown	Yes
2019-08-13 00:00	Contact Form by BestWebSoft – Advanced Contact Us Form Builder for WordPress <= 4.0.1 - Cross-Site Scripting Contact Form by BestWebSoft < 4.0.2	`CVE-2016-10869`	6.1 Medium	Unknown	Yes
2019-07-11 00:00	One Click SSL <= 1.4.6 - Cross-Site Request Forgery One Click SSL < 1.4.7	`CVE-2019-15828`	8.8 High	Unknown	Yes
2019-05-08 00:00	Ultimate Faqs <= 1.8.21 - Cross-Site Scripting Ultimate FAQ Accordion Plugin < 1.8.22	`CVE-2019-15643`	6.1 Medium	Unknown	Yes

Showing 1–10 of 13 reports