José Aguilera

José Aguilera is a security researcher credited with 14 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #347 of 3,515 contributors. Their disclosures were published between 2021 and 2025. The most productive year was 2021, with 7 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 8 of their findings (57%). Other recurring categories include Path Traversal, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.0, peaking at 9.8. Severity breakdown: 1 critical and 2 high.

The most affected software includes Ezoic (2), SEUR Oficial (2), CAOS (1), across 12 distinct plugins, themes and core versions in total.

12 of the 14 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "Ezoic <= 2.8.8 - Missing Authorization to Stored Cross-Site Scripting", scores 9.8 out of 10.

20212022202320242025

Critical

High

Medium

Low

Global Rank

#347

of 3,515 researchers

Vulns

Critical1

High2

Medium11

Low0

Affected Assets

12plugins

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

14 records


2025-02-21 15:49	Pago por Redsys <= 1.0.12 - Reflected Cross-Site Scripting Pago por Redsys <= 1.0.12	`CVE-2024-12467`	6.1 Medium	José Aguilera	Yes
2022-11-17 00:00	Ezoic <= 2.8.8 - Missing Authorization to Stored Cross-Site Scripting Ezoic <= 2.8.8	`CVE-2022-41132`	9.8 Critical	José Aguilera	Yes
2022-11-17 00:00	Ezoic <= 2.8.8 - Authenticated (Admin+) Stored Cross-Site Scripting Ezoic <= 2.8.8	`CVE-2022-41315`	7.2 High	José Aguilera	Yes
2022-04-13 00:00	Tipsacarrier < 1.5.0.5 - Missing Authorization to Order Disclosure Tipsacarrier < 1.5.0.5	`CVE-2021-25002`	6.5 Medium	José Aguilera	Yes
2022-04-07 10:58	Plausible Analytics <= 1.2.2 - Stored Cross-Site Scripting Plausible Analytics <= 1.2.2	`CVE-2022-27845`	4.8 Medium	José Aguilera	Yes
2022-02-20 00:00	Patreon WordPress <= 1.8.1 - Authenticated Stored Cross-Site Scripting Patreon WordPress < 1.8.2	`CVE-2021-25026`	5.5 Medium	José Aguilera	Yes
2022-01-10 00:00	SEUR Oficial < 1.7.2 - Authenticated Arbitrary File Download SEUR Oficial < 1.7.2	`CVE-2021-25004`	4.9 Medium	José Aguilera	Yes
2021-12-20 00:00	SEUR Oficial <= 1.6.0 - Cross-Site Scripting SEUR Oficial < 1.7.0	`CVE-2021-25005`	4.8 Medium	José Aguilera	Yes
2021-12-16 00:00	Crisp Live Chat <= 0.31 Cross-Site Request Forgery to Stored Cross-Site Scripting Crisp <= 0.31	`CVE-2021-43353`	8.8 High	José Aguilera	Yes
2021-12-08 13:23	Fathom Analytics <= 3.0.4 - Stored Cross-Site Scripting Fathom Analytics for WP <= 3.0.4	`CVE-2021-41836`	4.8 Medium	José Aguilera	Yes

Showing 1–10 of 14 reports