Michal Lipinski

Michal Lipinski is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #541 of 3,515 contributors. Their disclosures were published between 2020 and 2022. The most productive year was 2021, with 5 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 6 of their findings (75%). Other recurring categories include External Control Of File Name Or Path, Improper Authentication. The average CVSS score across these disclosures is 6.2, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes OTP Login With Phone Number (2), Customer Email Verification… (1), Easy Feeds for X/Twitter (1), across 7 distinct plugins, themes and core versions in total.

7 of the 8 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Email Verification for WooCommerce <= 1.8.1 - Authentication Bypass", scores 8.8 out of 10.

202020212022

Critical

High

Medium

Low

Global Rank

#541

of 3,515 researchers

Vulns

Critical0

High1

Medium7

Low0

Affected Assets

8plugins

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

8 records


2022-07-05 00:00	Login with phone number <= 1.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting OTP Login With Phone Number <= 1.3.7	`CVE-2022-0598`	5.5 Medium	Michal Lipinski	Yes
2022-02-16 00:00	Login with phone number <= 1.3.6 - Unauthenticated Remote Plugin Deletion OTP Login With Phone Number < 1.3.7	`CVE-2022-0593`	6.5 Medium	Michal Lipinski	Yes
2021-09-22 00:00	Video Player for YouTube <= 1.3 - Cross-Site Scripting Video Player for YouTube < 1.4	`CVE-2021-24414`	5.4 Medium	Michal Lipinski	Yes
2021-09-20 00:00	Polo Video Gallery – Best wordpress video gallery plugin <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Polo Video Gallery <= 1.2	`CVE-2021-24415`	5.4 Medium	Michal Lipinski	No
2021-09-20 00:00	StreamCast – Radio Player for WordPress <= 2.1.0 - Cross-Site Scripting StreamCast < 2.1.1	`CVE-2021-24416`	5.4 Medium	Michal Lipinski	Yes
2021-09-20 00:00	Easy Twitter Feed < 1.2 - Cross-Site Scripting Easy Feeds for X/Twitter < 1.2	`CVE-2021-24413`	6.4 Medium	Michal Lipinski	Yes
2021-09-20 00:00	Html5 Audio Player <= 2.1.2 - Contributor+ Stored Cross-Site Scripting HTML5 Audio Player <= 2.1.2	`CVE-2021-24412`	6.4 Medium	Michal Lipinski	Yes
2020-07-14 00:00	Email Verification for WooCommerce <= 1.8.1 - Authentication Bypass Customer Email Verification… <= 1.8.1	`N/A`	8.8 High	Michal Lipinski	Yes

Showing 1–8 of 8 reports