Xu-Liang Liao

Xu-Liang Liao is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #742 of 3,515 contributors. The disclosure was published in 2021.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 3 of their findings (60%). Other recurring categories include Cross-Site Scripting. The average CVSS score across these disclosures is 7.2, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes WP Fusion Lite (2), Countdown and CountUp (1), Poll Maker by AYS (1), across 4 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix. The most severe finding, "Countdown and CountUp, WooCommerce Sales Timers <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting", scores 8.8 out of 10.

2021

Critical

High

Medium

Low

Global Rank

#742

of 3,515 researchers

Vulns

Critical0

High2

Medium3

Low0

Affected Assets

4plugins

Avg CVSS

7.2

Average score of vulnerabilities

Researcher Submissions

5 records


2021-09-27 13:41	Countdown and CountUp, WooCommerce Sales Timers <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting Countdown and CountUp <= 1.5.7	`CVE-2021-34636`	8.8 High	Xu-Liang Liao	Yes
2021-08-18 00:00	Shopping Cart & eCommerce Store <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting Shopping Cart & eCommerce Store <= 5.1.0	`CVE-2021-34645`	8.8 High	Xu-Liang Liao	Yes
2021-08-06 17:51	WP Fusion Lite <= 3.37.18 – Cross-Site Request Forgery to Data Deletion WP Fusion Lite <= 3.37.18	`CVE-2021-34661`	6.1 Medium	Xu-Liang Liao	Yes
2021-08-06 00:00	WP Fusion Lite <= 3.37.18 – Reflected Cross-Site Scripting WP Fusion Lite <= 3.37.18	`CVE-2021-34660`	6.1 Medium	Xu-Liang Liao	Yes
2021-07-26 00:00	Poll Maker <= 3.2.8 – Reflected Cross-Site Scripting Poll Maker by AYS <= 3.2.8	`CVE-2021-34635`	6.1 Medium	Xu-Liang Liao	Yes

Showing 1–5 of 5 reports