Vinay Varma Mudunuri

Vinay Varma Mudunuri is a security researcher credited with 19 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #272 of 3,515 contributors. The disclosure was published in 2022.

Their research concentrates on Cross-Site Scripting, which accounts for 16 of their findings (84%). Other recurring categories include Cross-Site Request Forgery (CSRF), Code Injection. The average CVSS score across these disclosures is 6.1, peaking at 9.8. Severity breakdown: 1 critical and 2 high.

The most affected software includes Find and Replace All (2), Amazon Link (1), Auto More Tag (1), across 18 distinct plugins, themes and core versions in total.

4 of the 19 disclosed issues have a vendor fix, while 15 remain unpatched. The most severe finding, "VR Calendar <= 2.3.1 - Unauthenticated Remote Code Execution", scores 9.8 out of 10.

2022

Critical

High

Medium

Low

Global Rank

#272

of 3,515 researchers

Vulns

Critical1

High2

Medium16

Low0

Affected Assets

18plugins

Avg CVSS

6.1

Average score of vulnerabilities

Researcher Submissions

19 records


2022-11-04 00:00	Find and Replace All <= 1.3 - Cross-Site Request Forgery to Arbitrary Content Replacement Find and Replace All <= 1.3	`CVE-2022-3850`	8.8 High	Vinay Varma Mudunuri	No
2022-11-04 00:00	Find and Replace All <= 1.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting Find and Replace All <= 1.3	`CVE-2022-2311`	8.8 High	Vinay Varma Mudunuri	No
2022-08-01 00:00	Student Result or Employee Database <= 1.7.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting Student Result or Employee Database <= 1.7.4	`CVE-2022-2312`	6.1 Medium	Vinay Varma Mudunuri	Yes
2022-07-22 00:00	VR Calendar <= 2.3.1 - Unauthenticated Remote Code Execution VR Calendar <= 2.3.1	`CVE-2022-2314`	9.8 Critical	Vinay Varma Mudunuri	Yes
2022-07-19 00:00	DW Promobar <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting DW Promobar <= 1.0.4	`CVE-2022-2423`	5.5 Medium	Vinay Varma Mudunuri	No
2022-07-18 00:00	Auto More Tag <= 4.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting Auto More Tag <= 4.0.0	`CVE-2022-2411`	5.5 Medium	Vinay Varma Mudunuri	No
2022-07-18 00:00	mTouch Quiz <= 3.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting mTouch Quiz <= 3.1.3	`CVE-2022-2410`	5.5 Medium	Vinay Varma Mudunuri	Yes
2022-07-18 00:00	WP DS Blog Map <= 3.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting WP DS Blog Map <= 3.1.3	`CVE-2022-2425`	5.5 Medium	Vinay Varma Mudunuri	No
2022-07-18 00:00	Google Maps Anywhere <= 1.2.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting Google Maps Anywhere <= 1.2.6.3	`CVE-2022-2424`	5.5 Medium	Vinay Varma Mudunuri	No
2022-07-18 00:00	Better Tag Cloud <= 0.99.5 - Authenticated (Admin+) Stored Cross-Site Scripting Better Tag Cloud <= 0.99.5	`CVE-2022-2412`	5.5 Medium	Vinay Varma Mudunuri	No

Showing 1–10 of 19 reports