JoanClarke2

JoanClarke2 is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #779 of 3,515 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2024, with 4 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 2 of their findings (40%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Improper Handling Of Insufficient Permissions Or Privileges. The average CVSS score across these disclosures is 6.1, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes LearnPress (1), Robo Gallery (1), Salon Booking System (1), across 5 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix. The most severe finding, "Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Cross-Site Request Forgery to Post Creation and Limited Data Loss", scores 8.8 out of 10.