Alexander Concha

Alexander Concha is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #721 of 3,515 contributors. Their disclosures were published between 2011 and 2024. The most productive year was 2023, with 3 findings.

Their research concentrates on Improper Privilege Management, which accounts for 2 of their findings (40%). Other recurring categories include Cross-Site Scripting, Improper Input Validation. The average CVSS score across these disclosures is 8.2, peaking at 9.8. Severity breakdown: 3 critical and 0 high.

The most affected software includes All in One B2B for WooCommerce (1), Biometric Login For WooCommerce (1), Safe SVG (1), across 5 distinct plugins, themes and core versions in total.

4 of the 5 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "WooCommerce Ninja Forms Product Add-ons <= 1.7.0 - Unauthenticated Arbitrary File Upload", scores 9.8 out of 10.