luc

luc is a security researcher credited with 27 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #221 of 3,899 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2026, with 17 findings.

Their research concentrates on Improper Neutralization Of Input During Web Page Generation, which accounts for 6 of their findings (22%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Incorrect Privilege Assignment. The average CVSS score across these disclosures is 7.4, peaking at 9.8. Severity breakdown: 7 critical and 9 high.

The most affected software includes ToneDen Shortcode (4), Boost (2), Simple Link Directory Pro - AI Powered (2), across 22 distinct plugins, themes and core versions in total.

17 of the 27 disclosed issues have a vendor fix, while 10 remain unpatched. The most severe finding, "LMS Elementor Pro <= 1.0.4 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.