maru

maru is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,263 of 3,515 contributors. The disclosure was published in 2026.

Their research concentrates on Deserialization Of Untrusted Data, which accounts for 1 of their findings (50%). Other recurring categories include Missing Authorization. The average CVSS score across these disclosures is 9.3, peaking at 9.8. Severity breakdown: 1 critical and 1 high.

The most affected software includes FleekDash V2 (1), Mail Mint (1), across 2 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix. The most severe finding, "Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fields", scores 9.8 out of 10.

2026

Critical

High

Medium

Low

Global Rank

#1263

of 3,515 researchers

Vulns

Critical1

High1

Medium0

Low0

Affected Assets

2plugins

Avg CVSS

9.3

Average score of vulnerabilities

Researcher Submissions

2 records


2026-09-04 00:00	Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fields Mail Mint <= 1.31.0	`CVE-2026-10196`	9.8 Critical	maru	Yes
2026-07-29 15:09	FleekDash V2 <= 2.6.2.2 - Missing Authorization to Authenticated (Subscriber+) Administrator Account Takeover via /users/{id} REST Endpoint FleekDash V2 <= 2.6.2.2	`CVE-2026-14356`	8.8 High	maru	Yes

Showing 1–2 of 2 reports