Voxel@Night

Voxel@Night is a security researcher credited with 15 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #329 of 3,515 contributors. Their disclosures were published between 2014 and 2015. The most productive year was 2014, with 14 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 7 of their findings (47%). Other recurring categories include Cross-Site Scripting, Missing Authorization. The average CVSS score across these disclosures is 6.7, peaking at 8.8. Severity breakdown: 0 critical and 6 high.

The most affected software includes Wordfence Security (4), Advanced Editor Tools (1), Contact Form by BestWebSoft (1), across 12 distinct plugins, themes and core versions in total.

All 15 disclosed issues have since received a vendor fix. The most severe finding, "WP RSS Multi Importer < 3.14 - Cross-Site Request Forgery", scores 8.8 out of 10.

20142015

Critical

High

Medium

Low

Global Rank

#329

of 3,515 researchers

Vulns

Critical0

High6

Medium9

Low0

Affected Assets

12plugins

Avg CVSS

6.7

Average score of vulnerabilities

Researcher Submissions

15 records


2015-01-22 00:00	Contact Form <= 3.82 - Authorization Bypass Contact Form by BestWebSoft <= 3.82	`N/A`	6.4 Medium	Voxel@Night	Yes
2014-09-27 00:00	Wordfence Security <= 5.2.3 - Stored Cross-Site Scripting via HTTP_HOST Wordfence Security <= 5.2.3	`N/A`	7.2 High	Voxel@Night	Yes
2014-09-17 00:00	Ready! Ecommerce Shopping Cart < 0.5.1 - Cross-Site Request Forgery and Cross-Site Scripting Ready! Ecommerce Shopping Cart < 0.5.1	`N/A`	6.1 Medium	Voxel@Night	Yes
2014-09-17 00:00	Disqus Comment System < 2.79 - Multiple Cross-Site Request Forgery Disqus Comment System < 2.79	`CVE-2014-5346`	6.3 Medium	Voxel@Night	Yes
2014-09-17 00:00	Ready! Google Maps <= 1.1.5 - Cross-Site Scripting Ready! Google Maps <= 1.1.5	`N/A`	6.1 Medium	Voxel@Night	Yes
2014-09-17 00:00	WP Photo Album Plus <= 5.4.7 - Stored Cross-Site Scripting WP Photo Album Plus <= 5.4.7	`N/A`	6.4 Medium	Voxel@Night	Yes
2014-09-17 00:00	WP RSS Multi Importer < 3.14 - Cross-Site Request Forgery WP RSS Multi Importer < 3.14	`N/A`	8.8 High	Voxel@Night	Yes
2014-09-14 00:00	Wordfence <= 5.2.3 - Multiple Protection Mechanism Bypasses Wordfence Security < 5.2.4	`N/A`	6.5 Medium	Voxel@Night	Yes
2014-09-14 00:00	Wordfence <= 5.2.3 - Stored Cross-Site Scripting via REQUEST_URI Wordfence Security <= 5.2.3	`N/A`	7.2 High	Voxel@Night	Yes
2014-09-08 00:00	W3 Total Cache <= 0.9.4 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting W3 Total Cache <= 0.9.4	`N/A`	8.8 High	Voxel@Night	Yes

Showing 1–10 of 15 reports