Yashar Shahinzadeh

Yashar Shahinzadeh is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #756 of 3,515 contributors. Their disclosures were published between 2013 and 2014. The most productive year was 2014, with 3 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (60%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.9, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Kadence Security (2), ThinkIT WP Contact Form (2), Acunetix WP Security (1), across 3 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix. The most severe finding, "Acunetix WP Security <= 4.0.4 - Cross-Site Request Forgery", scores 8.8 out of 10.

20132014

Critical

High

Medium

Low

Global Rank

#756

of 3,515 researchers

Vulns

Critical0

High2

Medium3

Low0

Affected Assets

3plugins

Avg CVSS

6.9

Average score of vulnerabilities

Researcher Submissions

5 records


2014-08-01 00:00	iThemes Security < 3.6.4 - Stored Cross-Site Scripting Kadence Security < 3.6.4	`N/A`	8.3 High	Yashar Shahinzadeh	Yes
2014-08-01 00:00	Better WP Security <= 3.6.3 - Stored Cross-Site Scripting Kadence Security <= 3.6.3	`N/A`	6.4 Medium	Yashar Shahinzadeh	Yes
2014-02-11 00:00	Acunetix WP Security <= 4.0.4 - Cross-Site Request Forgery Acunetix WP Security < 4.0.5	`N/A`	8.8 High	Yashar Shahinzadeh	Yes
2013-08-15 00:00	ThinkIT WP Contact Form Plugin < 0.3 - Cross-Site Scripting ThinkIT WP Contact Form < 0.3	`N/A`	6.1 Medium	Yashar Shahinzadeh	Yes
2013-08-15 00:00	ThinkIT WP Contact Form < 0.3 - Cross-Site Request Forgery ThinkIT WP Contact Form < 0.3	`N/A`	4.7 Medium	Yashar Shahinzadeh	Yes

Showing 1–5 of 5 reports