Martino Spagnuolo
Martino Spagnuolo is a security researcher credited with 49 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #133 of 3,899 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2025, with 46 findings.
Their research concentrates on Missing Authorization, which accounts for 11 of their findings (22%). Other recurring categories include SQL Injection, Path Traversal. The average CVSS score across these disclosures is 6.5, peaking at 9.8. Severity breakdown: 3 critical and 16 high.
The most affected software includes Infility Global (2), Accept Authorize.NET Payments Using… (1), Accept Stripe Payments Using Contact… (1), across 48 distinct plugins, themes and core versions in total.
39 of the 49 disclosed issues have a vendor fix, while 10 remain unpatched. The most severe finding, "Formality <= 1.5.9 - Unauthenticated Local File Inclusion", scores 9.8 out of 10.
#133
of 3,899 researchers
49
48
6.5
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C