Marcin Probola

Marcin Probola is a security researcher credited with 109 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #67 of 3,515 contributors. Their disclosures were published between 2015 and 2021. The most productive year was 2015, with 108 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 66 of their findings (61%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 7.0, peaking at 9.8. Severity breakdown: 11 critical and 35 high.

The most affected software includes Broken Link Manager (3), 3CX Free Live Chat, Calls & Messaging (2), Awesome Filterable Portfolio (2), across 96 distinct plugins, themes and core versions in total.

98 of the 109 disclosed issues have a vendor fix, while 11 remain unpatched. The most severe finding, "Google Map <= 2.2.5 - SQL Injection", scores 9.8 out of 10.

2015201620172018201920202021

Critical

High

Medium

Low

Global Rank

#67

of 3,515 researchers

Vulns

109

Critical11

High35

Medium63

Low0

Affected Assets

96plugins

Avg CVSS

7.0

Average score of vulnerabilities

Researcher Submissions

109 records


2021-11-22 00:00	Logo Carousel < 1.7.2 - Stored Cross-Site Scripting Logo Carousel < 1.7.2	`CVE-2015-9434`	6.5 Medium	Marcin Probola	Yes
2015-11-24 00:00	Social Share Button <= 2.1 - Stored Cross-Site Scripting Social Share Button <= 2.1	`N/A`	5.5 Medium	Marcin Probola	Yes
2015-11-24 00:00	SEO Rank Reporter <= 2.2.2 - Reflected Cross-Site Scripting SEO Rank Reporter <= 2.2.2	`N/A`	6.1 Medium	Marcin Probola	No
2015-11-24 00:00	Google Map <= 2.2.5 - SQL Injection Google Map < 2.2.6	`N/A`	9.8 Critical	Marcin Probola	Yes
2015-11-24 00:00	Websimon Tables <= 1.3.4 - Reflected Cross-Site Scripting Websimon Tables <= 1.3.4	`CVE-2015-9401`	6.1 Medium	Marcin Probola	No
2015-11-24 00:00	WP-Stats-Dashboard <= 2.9.4 - Authenticated SQL Injection WP-Stats-Dashboard <= 2.9.4	`CVE-2015-9399`	7.2 High	Marcin Probola	No
2015-11-24 00:00	Contact Form Maker <= 1.7.30 - Authenticated (Admin+) SQL Injection Contact Form by WD < 1.7.31	`N/A`	7.2 High	Marcin Probola	Yes
2015-11-24 00:00	Email Newsletter <= 20.13.6 - Reflected Cross-Site Scripting Email Newsletter <= 20.13.6	`N/A`	7.1 High	Marcin Probola	Yes
2015-11-24 00:00	WP Keyword link <= 1.7 - Cross-Site Scripting wp-keyword-link <= 1.7	`N/A`	6.1 Medium	Marcin Probola	No
2015-11-24 00:00	Plugin Central < 2.5.1 - Reflected Cross-Site Scripting Plugin Central < 2.5.1	`N/A`	7.1 High	Marcin Probola	Yes

Showing 1–10 of 109 reports