Marc-Alexandre Montpas

2016201720182019202020212022202320242025

Critical

High

Medium

Low

Global Rank

#106

of 3,238 researchers

Vulns

54

Critical15

High20

Medium19

Low0

Affected Assets

36

34plugins1theme1core

Avg CVSS

7.8

Average score of vulnerabilities

Researcher Submissions

54 records


2025-10-15 00:00	FunnelKit <= 3.12.0 - Reflected Cross-Site Scripting FunnelKit <= 3.12.0	`CVE-2025-10567`	6.1 Medium	Marc-Alexandre Montpas	Yes
2025-05-13 00:00	FancyBox for WordPress <= 3.3.5 - Unauthenticated Stored Cross-Site Scripting FancyBox for WordPress <= 3.3.5	`CVE-2025-3662`	7.2 High	Marc-Alexandre Montpas	Yes
2024-10-17 00:00	Jetpack <= 13.7 - Unauthenticated Arbitrary Block & Shortcode Execution Jetpack <= 13.7	`CVE-2024-10075`	6.5 Medium	Marc-Alexandre Montpas	Yes
2024-10-17 00:00	Jetpack <= 13.7 & Jetpack Boost <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Jetpack <= 13.7	`CVE-2024-10076`	6.4 Medium	Marc-Alexandre Montpas	Yes
2024-05-14 00:00	The Events Calendar <= 6.4.0 - Reflected Cross-Site Scripting The Events Calendar <= 6.4.0	`CVE-2024-4180`	6.1 Medium	Marc-Alexandre Montpas	Yes
2024-01-31 00:00	Pagelayer <= 1.7.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via Header/Footer code Page Builder: Pagelayer < 1.8.0	`CVE-2023-5124`	4.4 Medium	Marc-Alexandre Montpas	Yes
2023-12-21 00:00	Essential Blocks <= 4.4.2 - Unauthenticated Local File Inclusion Gutenberg Essential Blocks <= 4.4.2	`CVE-2023-6623`	9.8 Critical	Marc-Alexandre Montpas	Yes
2023-12-18 00:00	WP Google Maps <= 9.0.27 - Unauthenticated Stored Cross-Site Scripting via REST API WP Go Maps <= 9.0.27	`CVE-2023-6627`	6.1 Medium	Marc-Alexandre Montpas	Yes
2023-12-11 00:00	Popup Builder <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting Popup Builder < 4.2.3	`CVE-2023-6000`	6.1 Medium	Marc-Alexandre Montpas	Yes
2023-11-24 00:00	WP JobSearch <= 2.3.3 - Authentication Bypass JobSearch WP Job Board <= 2.3.3	`CVE-2023-6584`	9.8 Critical	Marc-Alexandre Montpas	Yes

Showing 1–10 of 54 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C