Jan w Oleju

Jan w Oleju is a security researcher credited with 16 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #301 of 3,515 contributors. Their disclosures were published between 2022 and 2024. The most productive year was 2022, with 15 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 6 of their findings (38%). Other recurring categories include Missing Authorization, Cross-Site Scripting. The average CVSS score across these disclosures is 6.5, peaking at 8.8. Severity breakdown: 0 critical and 5 high.

The most affected software includes Qubely (2), Adaptive Images for WordPress (1), Catch Web Tools (1), across 15 distinct plugins, themes and core versions in total.

14 of the 16 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "WP-Matomo Integration (WP-Piwik) <= 1.0.26 - Cross-Site Request Forgery", scores 8.8 out of 10.

202220232024

Critical

High

Medium

Low

Global Rank

#301

of 3,515 researchers

Vulns

Critical0

High5

Medium11

Low0

Affected Assets

16plugins

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

16 records


2024-03-20 00:00	WordPress Ping Optimizer <= 2.35.1.3.0 - Cross-Site Request Forgery to Log Clearing WordPress Ping Optimizer <= 2.35.1.3.0	`CVE-2023-6385`	4.3 Medium	Jan w Oleju	No
2022-06-14 00:00	Qubely <= 1.7.9 - Incorrect Authorization Qubely 1.8.0	`N/A`	5.4 Medium	Jan w Oleju	Yes
2022-06-06 00:00	Qubely <= 1.7.8 - Missing Authorization Qubely <= 1.7.8	`N/A`	5.4 Medium	Jan w Oleju	Yes
2022-04-04 00:00	Weblizar Pin It Button On Image Hover And Post < 3.4 - Authorization Bypass Weblizar Pin It Button On Image Hover… < 3.4	`N/A`	5.4 Medium	Jan w Oleju	Yes
2022-04-02 00:00	Quick Adsense < 2.8.2 - Missing Authorization Quick Adsense < 2.8.2	`N/A`	6.5 Medium	Jan w Oleju	Yes
2022-03-14 00:00	Members List Plugin <= 4.3.6 - Reflected Cross-Site Scripting Members List Plugin <= 4.3.6	`N/A`	6.1 Medium	Jan w Oleju	Yes
2022-02-21 00:00	Hide Admin Bar Based On User Roles < 3.1.0 - Cross-Site Request Forgery Hide Admin Bar Based on User Roles < 3.1.0	`N/A`	4.3 Medium	Jan w Oleju	Yes
2022-02-15 00:00	Relevanssi – A Better Search < 4.14.6 & Relevanssi – A Better Search Pro < 2.16.5 - Missing Authorization Relevanssi Premium < 2.16.5	`N/A`	6.3 Medium	Jan w Oleju	Yes
2022-02-07 00:00	WP-Matomo Integration (WP-Piwik) <= 1.0.26 - Cross-Site Request Forgery Connect Matomo < 1.0.27	`N/A`	8.8 High	Jan w Oleju	Yes
2022-02-03 00:00	EasyJobs <= 1.4.7 - Reflected Cross-Site Scripting easy.jobs < 1.4.8	`N/A`	6.1 Medium	Jan w Oleju	Yes

Showing 1–10 of 16 reports