Kacper Szurek

Kacper Szurek is a security researcher credited with 63 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #102 of 3,515 contributors. Their disclosures were published between 2009 and 2020. The most productive year was 2015, with 29 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 31 of their findings (49%). Other recurring categories include SQL Injection, Missing Authorization. The average CVSS score across these disclosures is 7.2, peaking at 9.9. Severity breakdown: 7 critical and 25 high.

The most affected software includes WP All Import Pro (4), Floating Social Bar (2), Image Gallery - Responsive Photo Gallery (2), across 54 distinct plugins, themes and core versions in total.

62 of the 63 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "WP Symposium < 14.11 - Authenticated SQL Injection", scores 9.9 out of 10.

2011201220132014201520162017201820192020

Critical

High

Medium

Low

Global Rank

#102

of 3,515 researchers

Vulns

Critical7

High25

Medium31

Low0

Affected Assets

54plugins1theme

Avg CVSS

7.2

Average score of vulnerabilities

Researcher Submissions

63 records


2020-03-19 00:00	All Import Pro Plugin < 4.1.2 - SQL injection WP All Import Pro < 4.1.2	`N/A`	8.8 High	Kacper Szurek	Yes
2020-02-19 00:00	Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks WP All Import Pro <= 4.1.1	`N/A`	6.3 Medium	Kacper Szurek	Yes
2020-02-19 00:00	Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection WP All Import Pro <= 4.1.1	`N/A`	7.2 High	Kacper Szurek	Yes
2016-06-20 00:00	Lingotek Translation <= 1.1.8 - Cross-Site Scripting Ray Enterprise Translation <= 1.1.8	`N/A`	6.1 Medium	Kacper Szurek	Yes
2016-06-12 00:00	WP Support Plus Responsive Ticket System <= 7.1.4 - Authentication Bypass WP Support Plus Responsive Ticket System < 8.0.0	`N/A`	9.8 Critical	Kacper Szurek	Yes
2016-06-06 00:00	Double Opt-In for Download <= 2.0.9 - SQL Injection Double Opt-In for Download < 2.1.0	`N/A`	8.8 High	Kacper Szurek	Yes
2016-05-30 00:00	Comments - wpDiscuz <= 3.1.4 - Reflected Cross-Site Scripting Comments <= 3.1.4	`N/A`	6.1 Medium	Kacper Szurek	Yes
2016-05-10 00:00	Wordfence Security – Firewall & Malware Scan 6.1.1 - 6.1.6 - Reflected Cross-Site Scripting Wordfence Security 6.1.1 – 6.1.6	`N/A`	6.1 Medium	Kacper Szurek	Yes
2016-03-21 00:00	Slideshow Gallery <= 1.6 - Cross-Site Scripting Slideshow Gallery LITE <= 1.6	`N/A`	6.1 Medium	Kacper Szurek	Yes
2016-02-08 00:00	Image Gallery – Responsive Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting via linkbutton Image Gallery - Responsive Photo Gallery <= 1.7.0	`N/A`	6.1 Medium	Kacper Szurek	Yes

Showing 1–10 of 63 reports