Martino Spagnuolo
Martino Spagnuolo is a security researcher credited with 49 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #123 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2025, with 46 findings.
Their research concentrates on Missing Authorization, which accounts for 11 of their findings (22%). Other recurring categories include SQL Injection, Path Traversal. The average CVSS score across these disclosures is 6.5, peaking at 9.8. Severity breakdown: 3 critical and 16 high.
The most affected software includes Infility Global (2), Accept Authorize.NET Payments Using… (1), Accept Stripe Payments Using Contact… (1), across 48 distinct plugins, themes and core versions in total.
35 of the 49 disclosed issues have a vendor fix, while 14 remain unpatched. The most severe finding, "Formality <= 1.5.9 - Unauthenticated Local File Inclusion", scores 9.8 out of 10.
#123
of 3,515 researchers
49
48
6.5
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C