V1n1v131r4

V1n1v131r4 is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #878 of 3,515 contributors. The disclosure was published in 2020.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 6.8, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Postie (2), Htaccess by BestWebSoft (1), WP Database Backup (1), across 3 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix. The most severe finding, "Htaccess <= 1.8.1 - Cross-Site Request Forgery", scores 8.8 out of 10.

2020

Critical

High

Medium

Low

Global Rank

#878

of 3,515 researchers

Vulns

Critical0

High2

Medium2

Low0

Affected Assets

3plugins

Avg CVSS

6.8

Average score of vulnerabilities

Researcher Submissions

4 records


2020-02-06 00:00	WP Database Backup <= 5.5 - Unauthenticated Information Disclosure WP Database Backup <= 5.5	`CVE-2020-7241`	7.5 High	V1n1v131r4	Yes
2020-02-01 00:00	Htaccess <= 1.8.1 - Cross-Site Request Forgery Htaccess by BestWebSoft <= 1.8.1	`CVE-2020-8658`	8.8 High	V1n1v131r4	Yes
2020-01-02 00:00	Postie <= 1.9.40 - Post Submission Spoofing & Stored Cross-Site Scripting Postie < 1.9.41	`CVE-2019-20203`	5.3 Medium	V1n1v131r4	Yes
2020-01-02 00:00	Postie <= 1.9.40 - Cross-Site Scripting Postie < 1.9.41	`CVE-2019-20204`	5.4 Medium	V1n1v131r4	Yes

Showing 1–4 of 4 reports