y4ng0615

y4ng0615 is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #795 of 3,515 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2025, with 3 findings.

Their research concentrates on SQL Injection, which accounts for 5 of their findings (100%). The average CVSS score across these disclosures is 5.4, peaking at 7.5. Severity breakdown: 0 critical and 1 high.

The most affected software includes Melapress File Monitor (2), Auto Affiliate Links (1), FunnelKit Automations (1), across 4 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix.

20242025

Critical

High

Medium

Low

Global Rank

#795

of 3,515 researchers

Vulns

Critical0

High1

Medium4

Low0

Affected Assets

4plugins

Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

5 records


2025-03-03 00:00	WP-Recall – Registration, Profile, Commerce & More <= 16.26.11 - Authenticated (Admin+) SQL Injection WP-Recall <= 16.26.11	`CVE-2024-9770`	4.9 Medium	y4ng0615	Yes
2025-03-02 00:00	Melapress File Monitor <= 2.0.2 - Authenticated (Admin+) Authenticated SQL Injection Melapress File Monitor <= 2.0.2	`CVE-2024-10009`	4.9 Medium	y4ng0615	Yes
2025-03-02 00:00	Melapress File Monitor <= 2.1.0 - Authenticated (Admin+) Authenticated SQL Injection Melapress File Monitor <= 2.1.0	`CVE-2024-9879`	4.9 Medium	y4ng0615	Yes
2024-10-24 00:00	Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.2.2 - Unauthenticated SQL Injection FunnelKit Automations <= 3.2.2	`CVE-2024-9186`	7.5 High	y4ng0615	Yes
2024-09-18 00:00	Auto Affiliate Links <= 6.4.6 - Authenticated (Admin+) SQL Injection Auto Affiliate Links <= 6.4.6	`CVE-2024-9838`	4.9 Medium	y4ng0615	Yes

Showing 1–5 of 5 reports