Diogo Pinto

Diogo Pinto is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,848 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 2 of their findings (100%). The average CVSS score across these disclosures is 4.8, peaking at 5.3.

The most affected software includes FluentBoards (1), FluentCart A New Era of eCommerce (1), across 2 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1848

of 3,823 researchers

Vulns

Critical0

High0

Medium2

Low0

Affected Assets

2plugins

Avg CVSS

4.8

Average score of vulnerabilities

Researcher Submissions

2 records


2026-08-02 00:00	FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration < 1.95.3 - Authenticated (Subscriber+) Insecure Direct Object Reference FluentBoards < 1.95.3	`CVE-2026-14938`	4.3 Medium	Diogo Pinto	Yes
2026-07-13 00:00	FluentCart <= 1.5.2 - Insecure Direct Object Reference to Unauthenticated Order PII Disclosure FluentCart A New Era of eCommerce <= 1.5.2	`CVE-2026-14927`	5.3 Medium	Diogo Pinto	Yes

Showing 1–2 of 2 reports