Calvin Alkan

Calvin Alkan is a security researcher credited with 6 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #664 of 3,515 contributors. Their disclosures were published between 2022 and 2024. The most productive year was 2022, with 5 findings.

Their research concentrates on Exposure Of Sensitive Information To An Unauthorized Actor, which accounts for 2 of their findings (33%). Other recurring categories include Download Of Code Without Integrity Check, Missing Authorization. The average CVSS score across these disclosures is 6.4, peaking at 7.5. Severity breakdown: 0 critical and 3 high.

The most affected software includes WP 2FA (2), All-In-One Security (AIOS) (1), Defender Security (1), across 5 distinct plugins, themes and core versions in total.

All 6 disclosed issues have since received a vendor fix.

202220232024

Critical

High

Medium

Low

Global Rank

#664

of 3,515 researchers

Vulns

Critical0

High3

Medium3

Low0

Affected Assets

5plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

6 records


2024-03-24 00:00	WP Crontrol <= 1.16.1 - Remote Code Execution WP Crontrol <= 1.16.1	`CVE-2024-28850`	7.5 High	Calvin Alkan	Yes
2022-12-07 00:00	WP 2FA – Two-factor authentication for WordPress <= 2.2.0 - Missing Authorization WP 2FA <= 2.2.0	`CVE-2022-44595`	4.3 Medium	Calvin Alkan	Yes
2022-11-23 00:00	Defender Security <= 3.3.2 - Sensitive Information Disclosure Defender Security <= 3.3.2	`CVE-2022-44581`	7.5 High	Calvin Alkan	Yes
2022-11-23 00:00	miniOrange's Google Authenticator <= 5.6.1 - Sensitive Data Exposure of Multifactor Backup Codes miniOrange 2FA <= 5.6.1	`CVE-2022-44589`	7.5 High	Calvin Alkan	Yes
2022-09-30 00:00	All In One WP Security & Firewall 5.0.0 - 5.0.7 - Protection Bypass via IP Spoofing All-In-One Security (AIOS) 5.0.0 – 5.0.7	`N/A`	6.5 Medium	Calvin Alkan	Yes
2022-09-14 00:00	WP 2FA <= 2.2.1 - Time-Based TOTP attack to Sensitive Information Exposure WP 2FA <= 2.2.1	`CVE-2022-2891`	5.3 Medium	Calvin Alkan	Yes

Showing 1–6 of 6 reports