zhangyunpei

zhangyunpei is a security researcher credited with 25 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #218 of 3,515 contributors. Their disclosures were published between 2022 and 2023. The most productive year was 2022, with 24 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 23 of their findings (92%). Other recurring categories include SQL Injection. The average CVSS score across these disclosures is 5.6, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Seed Social (2), 404 to Start (1), Analytics for WP (1), across 24 distinct plugins, themes and core versions in total.

15 of the 25 disclosed issues have a vendor fix, while 10 remain unpatched.

20222023

Critical

High

Medium

Low

Global Rank

#218

of 3,515 researchers

Vulns

Critical0

High1

Medium24

Low0

Affected Assets

24plugins

Avg CVSS

5.6

Average score of vulnerabilities

Researcher Submissions

25 records


2023-04-17 00:00	Video List Manager <= 1.7 - Authenticated (Admin+) SQL Injection Video List Manager <= 1.7	`CVE-2023-1408`	7.2 High	zhangyunpei	No
2022-12-27 00:00	EU Cookie Law <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting EU Cookie Law for GDPR/CCPA <= 3.1.6	`CVE-2022-3811`	5.5 Medium	zhangyunpei	No
2022-12-17 00:00	Multi Step Form <= 1.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting Multi Step Form <= 1.7.7	`CVE-2022-4196`	5.5 Medium	zhangyunpei	Yes
2022-12-15 00:00	404 to Start <= 1.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting 404 to Start <= 1.6.1	`CVE-2022-3855`	5.5 Medium	zhangyunpei	No
2022-12-07 00:00	WP Social Sharing <= 2.2 - Authenticated (Admin+) Stored Cross-Site Scripting WP Social Sharing <= 2.2	`CVE-2022-4198`	5.5 Medium	zhangyunpei	No
2022-12-05 00:00	Kwayy HTML Sitemap <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scipting Kwayy HTML Sitemap <= 3.1	`CVE-2022-3835`	5.5 Medium	zhangyunpei	Yes
2022-12-02 00:00	Simple Basic Contact Form <= 20220207 - Authenticated (Administrator+) Stored Cross-Site Scripting Simple Basic Contact Form <= 20220207	`CVE-2022-4226`	5.5 Medium	zhangyunpei	Yes
2022-12-01 00:00	Google Apps Login <= 3.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting Login for Google Apps <= 3.4.4	`CVE-2022-3840`	5.5 Medium	zhangyunpei	Yes
2022-11-30 00:00	Sliderby10Web <= 1.2.52 - Authenticated (Admin+) Cross-Site Scripting Slider by 10Web <= 1.2.52	`CVE-2022-4197`	5.5 Medium	zhangyunpei	Yes
2022-11-28 00:00	External Media <= 1.0.35 - Authenticated (Administrator+) Stored Cross-Site Scripting External Media <= 1.0.35	`CVE-2022-3832`	5.5 Medium	zhangyunpei	Yes

Showing 1–10 of 25 reports