Caspian

Caspian is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,055 of 3,333 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (100%). The average CVSS score across these disclosures is 6.4, peaking at 6.4.

The most affected software includes Royal Addons for Elementor (2), Jeg Kit for Elementor (1), across 2 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1055

of 3,333 researchers

Vulns

Critical0

High0

Medium3

Low0

Affected Assets

2plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

3 records


2026-05-04 14:53	Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter Royal Addons for Elementor <= 1.7.1056	`CVE-2026-5159`	6.4 Medium	Caspian	Yes
2026-05-01 16:52	Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute Jeg Kit for Elementor <= 3.1.0	`CVE-2026-6916`	6.4 Medium	Caspian	Yes
2026-04-16 13:10	Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget Royal Addons for Elementor <= 1.7.1056	`CVE-2026-5162`	6.4 Medium	Caspian	Yes

Showing 1–3 of 3 reports