Julio Potier

Julio Potier is a security researcher credited with 23 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #226 of 3,515 contributors. Their disclosures were published between 2011 and 2021. The most productive year was 2019, with 12 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 6 of their findings (26%). Other recurring categories include Cross-Site Scripting, Protection Mechanism Failure. The average CVSS score across these disclosures is 7.6, peaking at 9.8. Severity breakdown: 4 critical and 10 high.

The most affected software includes WordPress Sentinel (3), WPS Hide Login (3), WPS Limit Login (3), across 15 distinct plugins, themes and core versions in total.

All 23 disclosed issues have since received a vendor fix. The most severe finding, "WPS Limit Login < 1.4.6.1 - Authorization Bypass via IP Spoofing", scores 9.8 out of 10.

2012201320142015201620172018201920202021

Critical

High

Medium

Low

Global Rank

#226

of 3,515 researchers

Vulns

Critical4

High10

Medium9

Low0

Affected Assets

15plugins1theme

Avg CVSS

7.6

Average score of vulnerabilities

Researcher Submissions

23 records


2021-12-09 00:00	tarteaucitron.js – Cookies legislation & GDPR <= 1.5.4 - Cross-Site Request Forgery to Cross-Site Scripting tarteaucitron.io <= 1.5.4	`CVE-2021-36887`	8.8 High	Julio Potier	Yes
2021-04-22 00:00	iThemes Security < 7.9.1 and iThemes Security Pro < 6.8.4 - Hidden Login Bypass Kadence Security < 7.9.1	`N/A`	5.3 Medium	Julio Potier	Yes
2020-06-03 00:00	Newspaper <= 10.3.3 - Reflected Cross-Site Scripting Newspaper - News & WooCommerce… <= 10.3.3	`N/A`	6.1 Medium	Julio Potier	Yes
2020-05-19 00:00	WP Frontend Profile <= 1.2.1 - Cross-Site Request Forgery WP Frontend Profile <= 1.2.1	`N/A`	8.8 High	Julio Potier	Yes
2020-01-17 00:00	Contextual Adminbar Color <= 0.2 - Stored Cross-Site Scripting Contextual Adminbar Color <= 0.2	`N/A`	6.4 Medium	Julio Potier	Yes
2019-07-23 00:00	WPS Bidouille <= 1.12.2 - Multiple Cross-Site Request Forgery WPS Bidouille <= 1.12.2	`N/A`	8.8 High	Julio Potier	Yes
2019-07-23 00:00	WPS Cleaner <= 1.4.4 - Missing Authorization Checks WPS Cleaner <= 1.4.4	`N/A`	6.3 Medium	Julio Potier	Yes
2019-07-23 00:00	WPS Hide Login <= 1.5.2.2 - Login Page Disclosure via 'action=confirmaction' WPS Hide Login < 1.5.3	`CVE-2019-15823`	5.3 Medium	Julio Potier	Yes
2019-07-23 00:00	WPS Hide Login <= 1.5.2.2 - Login Page Disclosure via Referer Header WPS Hide Login <= 1.5.2.2	`CVE-2019-15826`	5.3 Medium	Julio Potier	Yes
2019-07-23 00:00	WPS Limit Login < 1.4.6.1 - Cross-Site Request Forgery WPS Limit Login < 1.4.6.1	`N/A`	8.8 High	Julio Potier	Yes

Showing 1–10 of 23 reports