John Castro
John Castro is a security researcher credited with 14 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #343 of 3,515 contributors. Their disclosures were published between 2018 and 2024. The most productive year was 2024, with 4 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 7 of their findings (50%). Other recurring categories include SQL Injection, Improper Access Control. The average CVSS score across these disclosures is 6.8, peaking at 9.8. Severity breakdown: 2 critical and 3 high.
The most affected software includes User Profile Builder (2), 3CX Free Live Chat, Calls & Messaging (1), Advanced Contact form 7 DB (1), across 13 distinct plugins, themes and core versions in total.
12 of the 14 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.8 - Authentication Bypass", scores 9.8 out of 10.
#343
of 3,515 researchers
14
13
6.8
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C