Luca Jungnickel

Luca Jungnickel is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #905 of 3,333 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (100%). The average CVSS score across these disclosures is 5.3, peaking at 6.1.

The most affected software includes Custom Block Builder (1), Database for Contact Form 7 (1), Post Status Notifier Lite (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#905

of 3,333 researchers

Vulns

Critical0

High0

Medium4

Low0

Affected Assets

4plugins

Avg CVSS

5.3

Average score of vulnerabilities

Researcher Submissions

4 records


2026-07-07 00:00	Database for Contact Form 7, WPforms, Elementor forms <= 1.5.2 - Reflected Cross-Site Scripting Database for Contact Form 7 <= 1.5.2	`CVE-2026-14870`	6.1 Medium	Luca Jungnickel	Yes
2026-07-02 00:00	Post Status Notifier Lite <= 1.12.0 - Reflected Cross-Site Scripting Post Status Notifier Lite <= 1.12.0	`CVE-2026-9577`	6.1 Medium	Luca Jungnickel	Yes
2026-06-11 00:00	Store Locator WordPress < 1.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting Store Locator WordPress < 1.6.6	`CVE-2026-9060`	4.4 Medium	Luca Jungnickel	Yes
2026-06-11 00:00	Custom Block Builder – Lazy Blocks < 4.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Custom Block Builder < 4.3.0	`CVE-2026-8981`	4.4 Medium	Luca Jungnickel	Yes

Showing 1–4 of 4 reports