Joaquin Ramirez Martinez

Joaquin Ramirez Martinez is a security researcher credited with 14 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #341 of 3,515 contributors. Their disclosures were published between 2015 and 2026. The most productive year was 2016, with 6 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (29%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection. The average CVSS score across these disclosures is 7.0, peaking at 9.8. Severity breakdown: 2 critical and 6 high.

The most affected software includes Booking Calendar Contact Form (5), Appointment Booking Calendar (2), CP Image Store with Slideshow (2), across 6 distinct plugins, themes and core versions in total.

All 14 disclosed issues have since received a vendor fix. The most severe finding, "Booking Calendar Contact Form < 1.0.24 - Blind SQL Injection", scores 9.8 out of 10.

2017201820192020202120222023202420252026

Critical

High

Medium

Low

Global Rank

#341

of 3,515 researchers

Vulns

Critical2

High6

Medium6

Low0

Affected Assets

6plugins

Avg CVSS

7.0

Average score of vulnerabilities

Researcher Submissions

14 records


2026-06-15 00:00	Polls CP <= 1.0.8 - Cross-Site Request Forgery Polls CP <= 1.0.8	`CVE-2016-20067`	4.3 Medium	Joaquin Ramirez Martinez	Yes
2026-06-15 00:00	Ultimate Product Catalog <= 4.4.48 - Authenticated (Contributor+) Arbitrary File Upload Ultimate Product Catalog <= 4.4.48	`CVE-2016-20075`	8.8 High	Joaquin Ramirez Martinez	Yes
2026-06-15 00:00	Booking Calendar Contact Form <= 1.1.24 - Unauthenticated Stored Cross-Site Scripting Booking Calendar Contact Form <= 1.1.24	`CVE-2016-20084`	7.2 High	Joaquin Ramirez Martinez	Yes
2026-06-15 00:00	Booking Calendar Contact Form <= 1.0.23 - Authenticated (Subscriber+) Stored Cross-Site Scripting Booking Calendar Contact Form <= 1.0.23	`CVE-2016-20070`	6.4 Medium	Joaquin Ramirez Martinez	Yes
2026-06-15 00:00	Polls CP <= 1.0.8 - Cross-Site Request Forgery to Cross-Site Scripting Polls CP <= 1.0.8	`CVE-2016-20066`	5.4 Medium	Joaquin Ramirez Martinez	Yes
2016-06-17 00:00	Ultimate Product Catalog <= 3.8.1 - Missing Authorization to Plugin Settings Update Ultimate Product Catalog < 3.8.2	`N/A`	4.3 Medium	Joaquin Ramirez Martinez	Yes
2016-02-08 00:00	Booking Calendar Contact Form <= 1.0.23 - Reflected Cross-Site Scripting Booking Calendar Contact Form <= 1.0.23	`CVE-2016-10908`	6.1 Medium	Joaquin Ramirez Martinez	Yes
2016-02-08 00:00	Booking Calendar Contact Form < 1.0.24 - Blind SQL Injection Booking Calendar Contact Form < 1.0.24	`CVE-2016-10909`	9.8 Critical	Joaquin Ramirez Martinez	Yes
2016-02-08 00:00	Booking Calendar Contact Form <= 1.0.23 - Shortcode SQL Injection Booking Calendar Contact Form <= 1.0.23	`CVE-2016-20068`	8.1 High	Joaquin Ramirez Martinez	Yes
2016-01-27 00:00	Appointment Booking Calendar <= 1.2.24 - SQL Injection Appointment Booking Calendar <= 1.2.24	`N/A`	9.8 Critical	Joaquin Ramirez Martinez	Yes

Showing 1–10 of 14 reports