Miguel Neto

Miguel Neto is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #720 of 3,515 contributors. Their disclosures were published between 2021 and 2023. The most productive year was 2021, with 4 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (40%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 8.3, peaking at 9.6. Severity breakdown: 2 critical and 2 high.

The most affected software includes Patreon WordPress (4), Jetpack (1), across 2 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix. The most severe finding, "Patreon WordPress <= 1.7.0 - Reflected Cross-Site Scripting", scores 9.6 out of 10.

202120222023

Critical

High

Medium

Low

Global Rank

#720

of 3,515 researchers

Vulns

Critical2

High2

Medium1

Low0

Affected Assets

2plugins

Avg CVSS

8.3

Average score of vulnerabilities

Researcher Submissions

5 records


2023-05-30 00:00	Jetpack <= 12.1 - Authenticated (Author+) Arbitrary File Manipulation Jetpack 2.0 – 12.1 · 102 branches	`CVE-2023-2996`	6.5 Medium	Miguel Neto	Yes
2021-03-26 00:00	Patreon WordPress < 1.7.0 - Local File Disclosure Patreon WordPress < 1.7.0	`CVE-2021-24227`	7.5 High	George Stephanis	Yes
2021-03-26 00:00	Patreon WordPress <= 1.7.0 - Reflected Cross-Site Scripting Patreon WordPress < 1.7.2	`CVE-2021-24228`	9.6 Critical	George Stephanis	Yes
2021-03-26 00:00	Patreon WordPress <= 1.6.9 - Cross-Site Request Forgery Patreon WordPress < 1.7.0	`CVE-2021-24230`	8.1 High	George Stephanis	Yes
2021-03-26 00:00	Patreon WordPress <= 1.7.0 - Reflected Cross-Site Scripting Patreon WordPress < 1.7.2	`CVE-2021-24229`	9.6 Critical	George Stephanis	Yes

Showing 1–5 of 5 reports