miguelxpn

miguelxpn is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #801 of 3,515 contributors. Their disclosures were published between 2022 and 2024. The most productive year was 2024, with 3 findings.

Their research concentrates on Server-Side Request Forgery (SSRF), which accounts for 3 of their findings (60%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting. The average CVSS score across these disclosures is 5.1, peaking at 6.4.

The most affected software includes Mailchimp for WooCommerce (2), Cost Calculator Builder (1), Download Manager (1), across 4 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix.

202220232024

Critical

High

Medium

Low

Global Rank

#801

of 3,515 researchers

Vulns

Critical0

High0

Medium5

Low0

Affected Assets

4plugins

Avg CVSS

5.1

Average score of vulnerabilities

Researcher Submissions

5 records


2024-11-27 00:00	Cost Calculator Builder <= 3.2.42 - Cross-Site Request Forgery to Settings Update Cost Calculator Builder <= 3.2.42	`CVE-2024-10892`	4.3 Medium	miguelxpn	Yes
2024-10-09 00:00	Download Manager <= 3.2.99 - Authenticated (Contributor+) Stored Cross-Site Scripting Download Manager <= 3.2.99	`CVE-2024-8444`	6.4 Medium	miguelxpn	Yes
2024-07-08 00:00	Jetpack Boost <= 3.4.6 - Authenticated (Admin+) Server-Side Request Forgery Jetpack Boost <= 3.4.6	`CVE-2024-6584`	5.5 Medium	miguelxpn	Yes
2022-08-03 00:00	Mailchimp for WooCommerce <= 2.7.1 - Authenticated (Admin+) Server-Side Request Forgery Mailchimp for WooCommerce <= 2.7.1	`CVE-2022-2556`	4.9 Medium	miguelxpn	Yes
2022-08-03 00:00	Mailchimp for WooCommerce <= 2.7 - Authenticated (Subscriber+) Server-Side Request Forgery Mailchimp for WooCommerce <= 2.7	`CVE-2022-2267`	4.3 Medium	miguelxpn	Yes

Showing 1–5 of 5 reports