mahdi salhi (CaptinSharky01)

mahdi salhi (CaptinSharky01) is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,844 of 3,878 contributors. Their disclosures were published between 2025 and 2026.

Their research concentrates on Missing Authorization, which accounts for 2 of their findings (100%). The average CVSS score across these disclosures is 5.1, peaking at 5.4.

The most affected software includes aBlocks (1), Custom Post Type UI (1), across 2 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix.

20252026

Critical

High

Medium

Low

Global Rank

#1844

of 3,878 researchers

Vulns

Critical0

High0

Medium2

Low0

Affected Assets

2plugins

Avg CVSS

5.1

Average score of vulnerabilities

Researcher Submissions

2 records


2026-01-06 19:05	aBlocks – WordPress Gutenberg Blocks <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Settings Modification aBlocks <= 2.4.0	`CVE-2025-12449`	5.4 Medium	mahdi salhi (CaptinSharky01)	Yes
2025-12-03 18:13	Custom Post Type UI <= 1.18.0 - Missing Authorization to Unauthenticated (Previously Administrator+) Custom Post Type Modification Custom Post Type UI <= 1.18.0	`CVE-2025-12826`	4.8 Medium	mahdi salhi (CaptinSharky01)	Yes

Showing 1–2 of 2 reports