Erik David Martin

Erik David Martin is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #432 of 3,515 contributors. Their disclosures were published between 2021 and 2026. The most productive year was 2021, with 8 findings.

Their research concentrates on SQL Injection, which accounts for 7 of their findings (70%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting. The average CVSS score across these disclosures is 8.0, peaking at 8.8. Severity breakdown: 0 critical and 9 high.

The most affected software includes Backup by Supsystic (2), Membership by Supsystic (2), Contact Form by Supsystic (1), across 8 distinct plugins, themes and core versions in total.

6 of the 10 disclosed issues have a vendor fix, while 4 remain unpatched. The most severe finding, "Data Tables Generator by Supsystic <= 1.9.99 - Time-Based Blind SQL Injection", scores 8.8 out of 10.

202120222023202420252026

Critical

High

Medium

Low

Global Rank

#432

of 3,515 researchers

Vulns

Critical0

High9

Medium1

Low0

Affected Assets

8plugins

Avg CVSS

8.0

Average score of vulnerabilities

Researcher Submissions

10 records


2026-05-16 00:00	Backup by Supsystic <= 2.3.9 - Unauthenticated Local File Inclusion Backup by Supsystic <= 2.3.9	`CVE-2020-37246`	8.1 High	Erik David Martin	No
2026-05-16 00:00	Membership by Supsystic <= 1.4.7 - Unauthenticated SQL Injection Membership by Supsystic <= 1.4.7	`CVE-2020-37244`	7.5 High	Erik David Martin	No
2021-02-08 00:00	Data Tables Generator by Supsystic <= 1.9.99 - Time-Based Blind SQL Injection Data Tables Generator by Supsystic <= 1.9.99	`N/A`	8.8 High	Erik David Martin	Yes
2021-02-08 00:00	Contact Form by Supsystic <= 1.7.10 - SQL Injections Contact Form by Supsystic <= 1.7.10	`N/A`	8.8 High	Erik David Martin	Yes
2021-02-08 00:00	Digital Publications by Supsystic <= 1.6.12 - Stored Cross-Site Scripting WordPress Flipbook by Supsystic <= 1.6.12	`N/A`	6.4 Medium	Erik David Martin	Yes
2021-02-08 00:00	Backup by Supsystic <= 2.3.11 - Cross-Site Request Forgery to Arbitrary File Download/Deletion Backup by Supsystic <= 2.3.11	`N/A`	8.1 High	Erik David Martin	Yes
2021-02-08 00:00	Newsletter by Supsystic <= 1.5.6 - Authenticated (Admin+) Time-Based Blind SQL Injection Newsletter by Supsystic <= 1.5.6	`N/A`	7.2 High	Erik David Martin	No
2021-02-08 00:00	Pricing Table by Supsystic <= 1.8.8 - Boolean-Based Blind SQL Injections Pricing Table by Supsystic <= 1.8.8	`N/A`	8.8 High	Erik David Martin	Yes
2021-02-08 00:00	Welcart e-Commerce <= 2.1.0 - SQL Injection Welcart e-Commerce <= 2.1.0	`N/A`	8.8 High	Erik David Martin	Yes
2021-02-08 00:00	Membership by Supsystic <= 1.5.0 - Authenticated (Admin+) Time-Based Blind SQL Injection Membership by Supsystic <= 1.5.0	`N/A`	7.2 High	Erik David Martin	No

Showing 1–10 of 10 reports