Marcin Węgłowski

Marcin Węgłowski is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #849 of 3,515 contributors. Their disclosures were published between 2020 and 2023. The most productive year was 2020, with 3 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (50%). Other recurring categories include Race Condition, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 7.5, peaking at 9.8. Severity breakdown: 1 critical and 2 high.

The most affected software includes Autoptimize (3), Post SMTP (1), across 2 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix. The most severe finding, "Autoptimize <= 2.7.7 - Arbitrary File Upload (and Remote Code Execution) via Import Settings", scores 9.8 out of 10.

2020202120222023

Critical

High

Medium

Low

Global Rank

#849

of 3,515 researchers

Vulns

Critical1

High2

Medium1

Low0

Affected Assets

2plugins

Avg CVSS

7.5

Average score of vulnerabilities

Researcher Submissions

4 records


2023-11-06 00:00	POST SMTP Mailer <= 2.7.0 - Unauthenticated Stored Cross-Site Scripting Post SMTP <= 2.7.0	`CVE-2023-5958`	7.2 High	Marcin Węgłowski	Yes
2020-10-09 00:00	Autoptimize <= 2.7.7 - Arbitrary File Upload (and Remote Code Execution) via Import Settings Autoptimize < 2.7.8	`CVE-2021-24376`	9.8 Critical	Marcin Węgłowski	Yes
2020-10-09 00:00	Autoptimize <= 2.7.7 - Unsafe File Upload to Cross-Site Scripting Autoptimize < 2.7.8	`CVE-2021-24378`	4.8 Medium	Marcin Węgłowski	Yes
2020-10-09 00:00	Autoptimize <= 2.7.7 - Race Condition leading to Remote Code Execution Autoptimize < 2.7.8	`CVE-2021-24377`	8.1 High	Marcin Węgłowski	Yes

Showing 1–4 of 4 reports