Logan Cote

Logan Cote is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #409 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on Cross-Site Scripting, which accounts for 11 of their findings (100%). The average CVSS score across these disclosures is 6.2, peaking at 6.4.

The most affected software includes bBlocks (1), Business Card Block (1), Countdown Timer Block (1), across 11 distinct plugins, themes and core versions in total.

All 11 disclosed issues have since received a vendor fix.

2025

Critical

High

Medium

Low

Global Rank

#409

of 3,515 researchers

Vulns

Critical0

High0

Medium11

Low0

Affected Assets

11plugins

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

11 records


2025-04-04 00:00	B Blocks - The ultimate block collection <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting bBlocks <= 2.0.0	`CVE-2025-32173`	6.4 Medium	Logan Cote	Yes
2025-02-23 00:00	Icon List Block <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Icon List Block <= 1.1.3	`CVE-2025-26937`	6.4 Medium	Logan Cote	Yes
2025-02-23 00:00	Business Card Block <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Business Card Block <= 1.0.5	`CVE-2025-26952`	6.4 Medium	Logan Cote	Yes
2025-02-23 00:00	Counters Block <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Counters Block <= 1.1.2	`CVE-2025-26939`	6.4 Medium	Logan Cote	Yes
2025-02-23 00:00	Info Cards – Gutenberg block for creating Beautiful Cards <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Info Cards <= 1.0.5	`CVE-2025-26945`	6.4 Medium	Logan Cote	Yes
2025-02-23 00:00	Countdown Timer <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Countdown Timer Block <= 1.2.6	`CVE-2025-26938`	6.4 Medium	Logan Cote	Yes
2025-02-23 00:00	Services Section block <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Services Section Block <= 1.3.4	`CVE-2025-26947`	6.4 Medium	Logan Cote	Yes
2025-02-23 00:00	Team Section Block <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Team Section Block <= 1.0.9	`CVE-2025-26949`	6.4 Medium	Logan Cote	Yes
2025-02-22 00:00	Sticky Content <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Sticky Content <= 1.0.1	`CVE-2025-26881`	6.4 Medium	Logan Cote	Yes
2025-02-14 00:00	Timeline Block <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Timeline Block <= 1.1.1	`CVE-2025-26754`	6.4 Medium	Logan Cote	Yes

Showing 1–10 of 11 reports