Jacek Sowiński (dzaku)

Jacek Sowiński (dzaku) is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #526 of 3,823 contributors. Their disclosures were published between 2014 and 2026. The most productive year was 2026, with 8 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 8 of their findings (89%). Other recurring categories include Injection. The average CVSS score across these disclosures is 6.2, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes SureDash (2), BulletProof Security (1), Events Made Easy (1), across 8 distinct plugins, themes and core versions in total.

All 9 disclosed issues have since received a vendor fix.

2017201820192020202120222023202420252026
Critical
High
Medium
Low
Global Rank

#526

of 3,823 researchers

Vulns

9

Critical0
High1
Medium8
Low0
Affected Assets

8

8plugins
Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

9 records
2026-10-15 20:56CVE-2026-107649
5.4
Medium
Jacek Sowiński (dzaku)Yes
2026-10-15 18:46CVE-2026-96870
6.4
Medium
Jacek Sowiński (dzaku)Yes
2026-10-13 00:00CVE-2026-109697
6.4
Medium
Jacek Sowiński (dzaku)Yes
2026-10-13 00:00CVE-2026-108490
6.4
Medium
Jacek Sowiński (dzaku)Yes
2026-10-13 00:00CVE-2026-108495
6.4
Medium
Jacek Sowiński (dzaku)Yes
2026-10-09 19:23CVE-2026-102774
6.4
Medium
Jacek Sowiński (dzaku)Yes
2026-10-09 18:47CVE-2026-102291
5.4
Medium
Jacek Sowiński (dzaku)Yes
2026-10-09 17:44CVE-2026-96840
7.2
High
Jacek Sowiński (dzaku)Yes
2014-08-01 00:00CVE-2013-3487
6.1
Medium
Jacek Sowiński (dzaku)Yes
Showing 1–9 of 9 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C