Martin Vierula

Martin Vierula is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #440 of 3,515 contributors. The disclosure was published in 2021.

Their research concentrates on Cross-Site Scripting, which accounts for 5 of their findings (50%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.7, peaking at 8.8. Severity breakdown: 0 critical and 4 high.

The most affected software includes Paid Membership Subscriptions (2), Age Gate (1), Block Bad Bots and Stop Bad Bots… (1), across 9 distinct plugins, themes and core versions in total.

All 10 disclosed issues have since received a vendor fix. The most severe finding, "Membership & Content Restriction – Paid Member Subscriptions <= 2.4.1 - SQL Injection", scores 8.8 out of 10.

2021

Critical

High

Medium

Low

Global Rank

#440

of 3,515 researchers

Vulns

Critical0

High4

Medium6

Low0

Affected Assets

9plugins

Avg CVSS

6.7

Average score of vulnerabilities

Researcher Submissions

10 records


2021-10-09 00:00	Inline Related Posts <= 3.0.4 - Authenticated (Admin+) Cross-Site Scripting Inline Related Posts <= 3.0.4	`N/A`	5.5 Medium	Martin Vierula	Yes
2021-10-06 00:00	Age Gate <= 2.16.3 - Stored Cross-Site Scripting Age Gate < 2.16.4	`N/A`	6.4 Medium	Martin Vierula	Yes
2021-08-23 00:00	Timetable and Event Schedule by MotoPress <= 2.3.18 - Author+ Stored Cross-Site Scripting Timetable and Event Schedule… <= 2.3.18	`CVE-2021-24724`	5.4 Medium	Martin Vierula	Yes
2021-08-23 00:00	Comment Link Remove and Other Comment Tools <= 2.1.4 - Arbitrary Comment Deletion via Cross-Site Request Forgery Comment Link Remove and Other Comment… <= 2.1.4	`CVE-2021-24725`	4.3 Medium	Martin Vierula	Yes
2021-08-06 00:00	Membership & Content Restriction – Paid Member Subscriptions <= 2.4.1 - SQL Injection Paid Membership Subscriptions <= 2.4.1	`CVE-2021-24728`	8.8 High	Martin Vierula	Yes
2021-08-06 00:00	Paid Member Subscriptions <= 2.4.1 - Reflected Cross-Site Scripting Paid Membership Subscriptions < 2.4.2	`N/A`	6.1 Medium	Martin Vierula	Yes
2021-08-06 00:00	WP Simple Booking Calendar <= 2.0.6 - Authenticated SQL Injection WP Simple Booking Calendar <= 2.0.6	`CVE-2021-24726`	8.8 High	Martin Vierula	Yes
2021-08-06 00:00	WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots < 6.60 - Authenticated SQL Injection Block Bad Bots and Stop Bad Bots… < 6.60	`CVE-2021-24727`	8.8 High	Martin Vierula	Yes
2021-04-05 00:00	Simple Membership <= 4.0.3 - Authenticated (Admin+) SQL Injections Simple Membership <= 4.0.3	`N/A`	7.2 High	Martin Vierula	Yes
2021-03-29 00:00	Virtual Robots.txt < 1.10 - Authenticated Stored Cross-Site Scripting Virtual Robots.txt <= 1.9	`CVE-2021-28121`	5.5 Medium	Martin Vierula	Yes

Showing 1–10 of 10 reports