Malvin Valerian Gultom

Malvin Valerian Gultom is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,198 of 3,515 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2025, with 2 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (67%). Other recurring categories include Server-Side Request Forgery (SSRF). The average CVSS score across these disclosures is 5.3, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes IP2Location Country Blocker (1), Radio Player (1), URL Shortify (1), across 3 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix.

20242025

Critical

High

Medium

Low

Global Rank

#1198

of 3,515 researchers

Vulns

Critical0

High1

Medium2

Low0

Affected Assets

3plugins

Avg CVSS

5.3

Average score of vulnerabilities

Researcher Submissions

3 records


2025-04-04 00:00	URL Shortify <= 1.10.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting URL Shortify <= 1.10.5.1	`CVE-2025-32134`	4.4 Medium	Malvin Valerian Gultom	Yes
2025-01-24 00:00	Download IP2Location Country Blocker <= 2.38.3 - Authenticated (Administrator+) Stored Cross-Site Scripting IP2Location Country Blocker <= 2.38.3	`CVE-2025-24731`	4.4 Medium	Malvin Valerian Gultom	Yes
2024-12-12 00:00	Radio Player <= 2.0.83 - Unauthenticated Server-Side Request Forgery Radio Player <= 2.0.83	`CVE-2024-54385`	7.2 High	Malvin Valerian Gultom	Yes

Showing 1–3 of 3 reports