Joshua Martinelle
Joshua Martinelle is a security researcher credited with 26 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #225 of 3,899 contributors. Their disclosures were published between 2022 and 2026. The most productive year was 2023, with 16 findings.
Their research concentrates on SQL Injection, which accounts for 15 of their findings (58%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data. The average CVSS score across these disclosures is 7.2, peaking at 9.8. Severity breakdown: 4 critical and 7 high.
The most affected software includes WP Post Author (2), BuddyForms (1), Bulk Price Update for Woocommerce (1), across 25 distinct plugins, themes and core versions in total.
23 of the 26 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "Gift Cards (Gift Vouchers and Packages) <= 4.3.2 - Unauthenticated SQL Injection", scores 9.8 out of 10.
#225
of 3,899 researchers
26
25
7.2
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C