Carlos Ferreira

Carlos Ferreira is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #791 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 3 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 5 of their findings (100%). The average CVSS score across these disclosures is 5.6, peaking at 7.5. Severity breakdown: 0 critical and 2 high.

The most affected software includes Insert Headers And Footers (1), LoginPress (1), Related Posts Thumbnails Plugin… (1), across 5 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix.

20252026

Critical

High

Medium

Low

Global Rank

#791

of 3,515 researchers

Vulns

Critical0

High2

Medium3

Low0

Affected Assets

5plugins

Avg CVSS

5.6

Average score of vulnerabilities

Researcher Submissions

5 records


2026-04-07 00:00	Simple Social Media Share Buttons – Social Sharing for Everyone <= 6.2.0 - Cross-Site Request Forgery Simple Social Media Share Buttons <= 6.2.0	`CVE-2026-34904`	4.3 Medium	Carlos Ferreira	Yes
2026-04-07 00:00	Under Construction, Coming Soon & Maintenance Mode <= 2.1.1 - Cross-Site Request Forgery Under Construction <= 2.1.1	`CVE-2026-34896`	4.3 Medium	Carlos Ferreira	Yes
2026-01-15 00:00	Related Posts Thumbnails Plugin for WordPress <= 4.3.2 - Cross-Site Request Forgery Related Posts Thumbnails Plugin… <= 4.3.2	`CVE-2026-24596`	4.3 Medium	Carlos Ferreira	Yes
2025-04-18 00:00	WP Headers And Footers <= 3.1.1 - Cross-Site Request Forgery to Arbitrary Options Update Insert Headers And Footers <= 3.1.1	`CVE-2025-2111`	7.5 High	Carlos Ferreira	Yes
2025-03-13 00:00	LoginPress <= 3.3.1 - Cross-Site Request Forgery to Arbitrary Options Update LoginPress <= 3.3.1	`CVE-2025-1764`	7.5 High	Carlos Ferreira	Yes

Showing 1–5 of 5 reports