CrashBandicot

CrashBandicot is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #511 of 3,515 contributors. Their disclosures were published between 2015 and 2026. The most productive year was 2015, with 5 findings.

Their research concentrates on Path Traversal, which accounts for 4 of their findings (50%). Other recurring categories include PHP Remote File Inclusion, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 8.4, peaking at 9.8. Severity breakdown: 3 critical and 5 high.

The most affected software includes S3 Bubble Amazon S3 HTML5 Video… (2), A/B Test for WordPress (1), DesignFolio Pllus (1), across 7 distinct plugins, themes and core versions in total.

4 of the 8 disclosed issues have a vendor fix, while 4 remain unpatched. The most severe finding, "A/B Test for WordPress <= 1.0.7 - Local File Inclusion", scores 9.8 out of 10.