Utkarsh Agrawal

Utkarsh Agrawal is a security researcher credited with 6 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #689 of 3,515 contributors. Their disclosures were published between 2022 and 2023. The most productive year was 2022, with 5 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 5 of their findings (83%). Other recurring categories include Path Traversal. The average CVSS score across these disclosures is 5.5, peaking at 6.1.

The most affected software includes MailerLite (1), Themify (1), Trakoo (1), across 6 distinct plugins, themes and core versions in total.

All 6 disclosed issues have since received a vendor fix.

20222023

Critical

High

Medium

Low

Global Rank

#689

of 3,515 researchers

Vulns

Critical0

High0

Medium5

Low1

Affected Assets

6plugins

Avg CVSS

5.5

Average score of vulnerabilities

Researcher Submissions

6 records


2023-08-14 00:00	Orders Tracking for WooCommerce <= 1.2.5 - Authenticated (Administrator+) Directory Traversal via 'file_url' Trakoo <= 1.2.5	`CVE-2023-4216`	2.7 Low	Utkarsh Agrawal	Yes
2022-06-20 00:00	WP Event Manager – Easily Build your Calendar of Events! <= 3.1.27 - Stored Cross Site Scripting WP Event Manager < 3.1.28	`CVE-2022-1474`	6.1 Medium	Utkarsh Agrawal	Yes
2022-05-18 00:00	Themify - WooCommerce Product Filter <= 1.3.7 - Reflected Cross-Site Scripting Themify <= 1.3.7	`CVE-2022-1532`	6.1 Medium	Utkarsh Agrawal	Yes
2022-05-18 00:00	MailerLite - Signup forms <= 1.5.3 - Reflected Cross-Site Scripting MailerLite <= 1.5.3	`CVE-2022-1604`	6.1 Medium	Utkarsh Agrawal	Yes
2022-05-06 00:00	WP 2FA – Two-factor authentication for WordPress <= 2.2.0 - Reflected Cross-Site Scripting WP 2FA <= 2.2.0	`CVE-2022-1527`	6.1 Medium	Utkarsh Agrawal	Yes
2022-04-25 00:00	WPC Smart Wishlist for WooCommerce <= 2.9.8 - Reflected Cross-Site Scripting WPC Smart Wishlist for WooCommerce < 2.9.9	`CVE-2022-1465`	6.1 Medium	Utkarsh Agrawal	Yes

Showing 1–6 of 6 reports