Yu Iwama

Yu Iwama is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #903 of 3,515 contributors. The disclosure was published in 2021.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (100%). The average CVSS score across these disclosures is 6.3, peaking at 7.1. Severity breakdown: 0 critical and 1 high.

The most affected software includes Fudousan Plugin (1), Recently (1), Welcart e-Commerce (1), across 4 distinct plugins, themes and core versions in total.

3 of the 4 disclosed issues have a vendor fix, while 1 remain unpatched.

2021

Critical

High

Medium

Low

Global Rank

#903

of 3,515 researchers

Vulns

Critical0

High1

Medium3

Low0

Affected Assets

4plugins

Avg CVSS

6.3

Average score of vulnerabilities

Researcher Submissions

4 records


2021-06-23 00:00	WordPress Popular Posts <= 5.3.2 - Authenticated Cross-Site Scripting WP Popular Posts < 5.3.3	`CVE-2021-20746`	6.4 Medium	Yu Iwama	Yes
2021-06-22 00:00	Fudousan Plugin <= 5.7.0 - Cross-Site Scripting Fudousan Plugin <= 5.7.0	`CVE-2021-20749`	7.1 High	Yu Iwama	No
2021-06-11 00:00	Welcart e-Commerce <= 2.2.3 - Reflected Cross-Site Scripting Welcart e-Commerce <= 2.2.3	`CVE-2021-20734`	6.1 Medium	Yu Iwama	Yes
2021-06-07 00:00	Recently <= 3.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting Recently < 3.0.5	`N/A`	5.5 Medium	Yu Iwama	Yes

Showing 1–4 of 4 reports