Yaniv Nizry

Yaniv Nizry is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,008 of 3,515 contributors. Their disclosures were published between 2020 and 2021. The most productive year was 2020, with 2 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 3 of their findings (100%). The average CVSS score across these disclosures is 8.6, peaking at 8.8. Severity breakdown: 0 critical and 3 high.

The most affected software includes FormsDB (1), Site Offline Or Coming Soon Or… (1), Ultimate Category Excluder (1), across 3 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix. The most severe finding, "Elementor Contact Form DB <= 1.5 - Cross-Site Request Forgery", scores 8.8 out of 10.

20202021

Critical

High

Medium

Low

Global Rank

#1008

of 3,515 researchers

Vulns

Critical0

High3

Medium0

Low0

Affected Assets

3plugins

Avg CVSS

8.6

Average score of vulnerabilities

Researcher Submissions

3 records


2021-01-14 00:00	Elementor Contact Form DB <= 1.5 - Cross-Site Request Forgery FormsDB <= 1.5	`CVE-2021-3133`	8.8 High	Yaniv Nizry	Yes
2020-12-23 00:00	Site Offline Or Coming Soon Or Maintenance Mode <= 1.4.2 - Cross-Site Request Forgery and Cross-Site Scripting Site Offline Or Coming Soon Or… <= 1.4.2	`CVE-2020-35773`	8.2 High	Yaniv Nizry	Yes
2020-01-08 00:00	Ultimate Category Excluder <= 1.1 - Cross-Site Request Forgery Ultimate Category Excluder <= 1.1	`CVE-2020-35135`	8.8 High	Yaniv Nizry	Yes

Showing 1–3 of 3 reports