Karolis Narvilas

Karolis Narvilas is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #516 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2024, with 4 findings.

Their research concentrates on SQL Injection, which accounts for 5 of their findings (63%). Other recurring categories include Code Injection, Cross-Site Scripting. The average CVSS score across these disclosures is 7.3, peaking at 10.0. Severity breakdown: 1 critical and 4 high.

The most affected software includes AI Chatbot & Semantic Search (2), AI Engine (2), Easy Newsletter Signups (1), across 6 distinct plugins, themes and core versions in total.

7 of the 8 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Chatbot with ChatGPT <= 2.4.4 - Unauthenticated SQL Injection", scores 10.0 out of 10.