Mor Golan

Mor Golan is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #851 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (40%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 5.9, peaking at 7.2. Severity breakdown: 0 critical and 2 high.

The most affected software includes Blacklist Manager (1), Easy Property Listings (1), Simply Schedule Appointments (1), across 5 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#851

of 3,823 researchers

Vulns

Critical0

High2

Medium3

Low0

Affected Assets

5plugins

Avg CVSS

5.9

Average score of vulnerabilities

Researcher Submissions

5 records


2026-10-12 00:00	Easy Property Listings <= 3.5.25 - Unauthenticated Stored Cross-Site Scripting Easy Property Listings <= 3.5.25	`CVE-2026-61989`	7.2 High	Mor Golan	Yes
2026-10-03 00:00	UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.73 - Unauthenticated Stored Cross-Site Scripting UsersWP <= 1.2.73	`CVE-2026-94641`	7.2 High	Mor Golan	Yes
2026-10-03 00:00	워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.5.17 - Missing Authorization to Unauthenticated Settings Update 워드프레스 결제 심플페이 <= 5.5.17	`CVE-2026-95597`	5.3 Medium	Mor Golan	Yes
2026-09-24 00:00	Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification <= 2.3.1 - Cross-Site Request Forgery Blacklist Manager <= 2.3.1	`CVE-2026-96838`	4.3 Medium	Mor Golan	Yes
2026-09-24 00:00	Simply Schedule Appointments <= 1.6.12.29 - Missing Authorization Simply Schedule Appointments <= 1.6.12.29	`CVE-2026-94074`	5.3 Medium	Mor Golan	Yes

Showing 1–5 of 5 reports