Yuki Haruma

Yuki Haruma is a security researcher credited with 32 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #181 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2023, with 31 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 19 of their findings (59%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization. The average CVSS score across these disclosures is 5.3, peaking at 8.8. Severity breakdown: 0 critical and 3 high.

The most affected software includes a3 Portfolio (1), Art Direction (1), Blazeo (1), across 32 distinct plugins, themes and core versions in total.

20 of the 32 disclosed issues have a vendor fix, while 12 remain unpatched. The most severe finding, "Easy Bet <= 1.0.7 - Authenticated(Contributor+) SQL Injection", scores 8.8 out of 10.

20232024
Critical
High
Medium
Low
Global Rank

#181

of 3,515 researchers

Vulns

32

Critical0
High3
Medium29
Low0
Affected Assets

32

32plugins
Avg CVSS

5.3

Average score of vulnerabilities

Researcher Submissions

32 records
2024-01-22 00:00CVE-2024-0761
8.1
High
Yuki HarumaYes
2023-08-17 00:00CVE-2023-40335
7.2
High
Yuki HarumaNo
2023-08-17 00:00CVE-2023-28790
4.4
Medium
Yuki HarumaYes
2023-07-12 00:00CVE-2023-37973
4.3
Medium
Yuki HarumaNo
2023-07-12 00:00CVE-2023-37983
6.4
Medium
Yuki HarumaNo
2023-07-05 00:00CVE-2023-37388
4.4
Medium
Yuki HarumaNo
2023-06-28 00:00CVE-2023-28415
4.4
Medium
Yuki HarumaYes
2023-06-02 00:00CVE-2023-31087
5.4
Medium
Yuki HarumaYes
2023-05-31 00:00CVE-2023-31088
4.3
Medium
Yuki HarumaYes
2023-05-30 00:00CVE-2023-34186
6.5
Medium
Yuki HarumaNo
Showing 1–10 of 32 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C