younsoung kim

younsoung kim is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #484 of 3,515 contributors. The disclosure was published in 2024.

Their research concentrates on Cross-Site Scripting, which accounts for 6 of their findings (67%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Command Injection. The average CVSS score across these disclosures is 6.2, peaking at 9.1. Severity breakdown: 2 critical and 1 high.

The most affected software includes Admin Dashboard RSS Feed (1), Auto Poster (1), Dextaz Ping (1), across 9 distinct plugins, themes and core versions in total.

7 of the 9 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "Z-Downloads <= 1.11.3 - Authenticated (Admin+) Arbitrary File Upload", scores 9.1 out of 10.

2024

Critical

High

Medium

Low

Global Rank

#484

of 3,515 researchers

Vulns

Critical2

High1

Medium6

Low0

Affected Assets

9plugins

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

9 records


2024-07-11 00:00	Job Board Manager <= 2.1.58 - Authenticated (Subscriber+) Stored Cross-Site Scripting Job Board Manager <= 2.1.58	`CVE-2024-38722`	6.4 Medium	Myungju Kim	Yes
2024-07-11 00:00	Admin Dashboard RSS Feed <= 3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting Admin Dashboard RSS Feed <= 3.4	`CVE-2024-38725`	4.4 Medium	Myungju Kim	Yes
2024-07-06 00:00	WP To Do <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting WP To Do <= 1.3.0	`CVE-2024-37539`	6.4 Medium	Myungju Kim	Yes
2024-07-05 00:00	WS Contact Form <= 1.3.7 - Authenticated (Administrator+) Stored Cross-Site Scripting WS Contact Form <= 1.3.7	`CVE-2024-37537`	4.4 Medium	Myungju Kim	Yes
2024-05-20 00:00	Dextaz Ping <= 0.65 - Authenticated (Admin+) Remote Code Execution Dextaz Ping <= 0.65	`CVE-2024-34792`	7.2 High	Myungju Kim	No
2024-05-10 00:00	Z-Downloads <= 1.11.3 - Authenticated (Admin+) Arbitrary File Upload Z-Downloads <= 1.11.3	`CVE-2024-34555`	9.1 Critical	Myungju Kim	Yes
2024-04-10 00:00	Save as PDF <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting Save as PDF Plugin by PDFCrowd <= 3.2.1	`CVE-2024-31930`	4.4 Medium	Myungju Kim	Yes
2024-04-10 00:00	Save as Image <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting Save as Image Plugin by PDFCrowd <= 3.2.1	`CVE-2024-31931`	4.4 Medium	Myungju Kim	Yes
2024-04-05 00:00	Auto Poster <= 1.2 - Authenticated (Administrator+) Arbitrary File Upload Auto Poster <= 1.2	`CVE-2024-31345`	9.1 Critical	Myungju Kim	No

Showing 1–9 of 9 reports