Marek Mikita

Marek Mikita is a security researcher credited with 26 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #212 of 3,515 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2025, with 14 findings.

Their research concentrates on Missing Authorization, which accounts for 11 of their findings (42%). Other recurring categories include Cross-Site Request Forgery (CSRF), Server-Side Request Forgery (SSRF). The average CVSS score across these disclosures is 4.9, peaking at 6.1.

The most affected software includes Arabic Webfonts (1), Automatic Featured Images from Videos (1), BetterLinks (1), across 26 distinct plugins, themes and core versions in total.

19 of the 26 disclosed issues have a vendor fix, while 7 remain unpatched.

20242025
Critical
High
Medium
Low
Global Rank

#212

of 3,515 researchers

Vulns

26

Critical0
High0
Medium25
Low1
Affected Assets

26

26plugins
Avg CVSS

4.9

Average score of vulnerabilities

Researcher Submissions

26 records
2025-06-12 00:00CVE-2025-49872
5.3
Medium
Marek MikitaYes
2025-06-05 00:00CVE-2025-49425
4.3
Medium
Marek MikitaNo
2025-05-16 00:00CVE-2025-48117
5.3
Medium
Marek MikitaYes
2025-05-07 00:00CVE-2025-47486
5.3
Medium
Marek MikitaYes
2025-05-07 00:00CVE-2025-47485
5.3
Medium
Marek MikitaYes
2025-04-11 00:00CVE-2025-26990
5.5
Medium
Marek MikitaYes
2025-04-01 00:00CVE-2025-31824
5.5
Medium
Marek MikitaYes
2025-04-01 00:00CVE-2025-31820
4.3
Medium
Marek MikitaYes
2025-03-27 00:00CVE-2025-30914
5.5
Medium
Marek MikitaYes
2025-02-03 00:00CVE-2025-22645
5.3
Medium
Marek MikitaNo
Showing 1–10 of 26 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C