Luka Sikic

Luka Sikic is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #884 of 3,515 contributors. Their disclosures were published between 2017 and 2019. The most productive year was 2019, with 3 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (50%). Other recurring categories include Missing Authorization. The average CVSS score across these disclosures is 6.6, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Blog Designer (1), Currency Switcher for WooCommerce (1), Simple Social Media Share Buttons (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

201720182019

Critical

High

Medium

Low

Global Rank

#884

of 3,515 researchers

Vulns

Critical0

High1

Medium3

Low0

Affected Assets

3plugins1core version

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

4 records


2019-11-02 00:00	Currency Switcher <= 2.11.1 - Authorization Bypass Currency Switcher for WooCommerce < 2.11.2	`CVE-2019-18668`	6.5 Medium	Luka Sikic	Yes
2019-05-01 00:00	Blog Designer <=1.8.10 - Unauthenticated Stored Cross-Site Scripting Blog Designer <= 1.8.10	`N/A`	7.2 High	Luka Sikic	Yes
2019-02-11 00:00	Simple Social Media Share Buttons 2.0.4 - 2.0.21 - Missing Authorization Simple Social Media Share Buttons 2.0.4 – 2.0.21	`N/A`	6.3 Medium	Luka Sikic	Yes
2017-09-19 00:00	WordPress Core < 4.8.2 - Cross-Site Scripting via Template Name WordPress 4.8 3.7 – 4.8.1 · 13 branches	`CVE-2017-14720`	6.4 Medium	Luka Sikic	Yes

Showing 1–4 of 4 reports