lowol

lowol is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #769 of 3,515 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2024, with 4 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (80%). Other recurring categories include Improper Neutralization Of Script-Related HTML Tags In A Web Page (Basic XSS). The average CVSS score across these disclosures is 6.4, peaking at 6.4.

The most affected software includes Content Blocks (Custom Post Widget) (2), Enter Addons (1), Post Grid (1), across 4 distinct plugins, themes and core versions in total.

4 of the 5 disclosed issues have a vendor fix, while 1 remain unpatched.

20242025

Critical

High

Medium

Low

Global Rank

#769

of 3,515 researchers

Vulns

Critical0

High0

Medium5

Low0

Affected Assets

4plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

5 records


2025-02-19 21:17	Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter Content Blocks (Custom Post Widget) <= 3.3.5	`CVE-2024-6432`	6.4 Medium	lowol	Yes
2024-09-06 01:19	Enter Addons – Ultimate Template Builder for Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card Widget Enter Addons <= 2.1.8	`CVE-2024-7611`	6.4 Medium	lowol	Yes
2024-09-05 00:00	Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Content Blocks (Custom Post Widget) <= 3.3.5	`CVE-2024-44051`	6.4 Medium	lowol	Yes
2024-08-20 17:23	Responsive Video <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Responsive Video <= 1.0	`CVE-2024-7629`	6.4 Medium	lowol	No
2024-08-13 00:00	Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block Post Grid <= 2.2.84	`CVE-2024-7588`	6.4 Medium	lowol	Yes

Showing 1–5 of 5 reports