Marcin Dudek (dudekmar)
Marcin Dudek (dudekmar) is a security researcher credited with 15 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #332 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2025, with 11 findings.
Their research concentrates on Missing Authorization, which accounts for 7 of their findings (47%). Other recurring categories include SQL Injection, Code Injection. The average CVSS score across these disclosures is 6.4, peaking at 9.8. Severity breakdown: 2 critical and 4 high.
The most affected software includes Advanced Custom Fields (1), Booking Calendar (1), Converter for Media (1), across 15 distinct plugins, themes and core versions in total.
All 15 disclosed issues have since received a vendor fix. The most severe finding, "Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution", scores 9.8 out of 10.
#332
of 3,515 researchers
15
15
6.4
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C