Emili Castells
Emili Castells is a security researcher credited with 39 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #155 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2023, with 25 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 21 of their findings (54%). Other recurring categories include Missing Authorization, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 6.0, peaking at 9.9. Severity breakdown: 3 critical and 6 high.
The most affected software includes Lava Directory Manager (2), WholesaleX (2), Annual Archive (1), across 37 distinct plugins, themes and core versions in total.
27 of the 39 disclosed issues have a vendor fix, while 12 remain unpatched. The most severe finding, "Photos and Files Contest Gallery <= 21.3.4 - Authenticated (Contributor+) SQL Injection", scores 9.9 out of 10.
#155
of 3,515 researchers
39
37
6.0
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C