Morato Antoine

Morato Antoine is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #556 of 3,917 contributors. The disclosure was published in 2026.

Their research concentrates on Improper Neutralization Of Input During Web Page Generation, which accounts for 4 of their findings (44%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Missing Authorization. The average CVSS score across these disclosures is 5.7, peaking at 7.2. Severity breakdown: 0 critical and 2 high.

The most affected software includes Academy LMS (2), Easy Appointments (1), Estatik Real Estate Plugin (1), across 8 distinct plugins, themes and core versions in total.

All 9 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#556

of 3,917 researchers

Vulns

Critical0

High2

Medium7

Low0

Affected Assets

8plugins

Avg CVSS

5.7

Average score of vulnerabilities

Researcher Submissions

9 records


2026-10-30 21:11	FlexStock <= 3.17.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via REST update endpoint FlexStock <= 3.17.2	`CVE-2026-107711`	6.4 Medium	Morato Antoine	Yes
2026-10-09 19:25	WPAdverts <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting via 'adverts_location' Parameter WPAdverts <= 2.3.4	`CVE-2026-100178`	7.2 High	Morato Antoine	Yes
2026-10-09 16:56	Real Estate Manager <= 7.3 - Unauthenticated Stored Cross-Site Scripting via 'first_name' Parameter Real Estate Manager <= 7.3	`CVE-2026-96667`	7.2 High	Morato Antoine	Yes
2026-10-05 00:00	Academy LMS <= 3.0.0 - Authenticated (Subscriber+) Insecure Direct Object Reference Academy LMS <= 3.0.0	`CVE-2026-104050`	4.3 Medium	Morato Antoine	Yes
2026-10-05 00:00	Academy LMS <= 3.0.0 - Authenticated (Subscriber+) Insecure Direct Object Reference Academy LMS <= 3.0.0	`CVE-2026-104049`	4.3 Medium	Morato Antoine	Yes
2026-09-29 07:17	WP Express Checkout (Fast Payments via PayPal & Stripe) <= 2.4.9 - Missing Authorization WP Express Checkout (Fast Payments via… <= 2.4.9	`CVE-2026-96818`	5.3 Medium	Morato Antoine	Yes
2026-09-17 00:00	Estatik <= 4.3.4 - Reflected Cross-Site Scripting Estatik Real Estate Plugin <= 4.3.4	`CVE-2026-76790`	6.1 Medium	Morato Antoine	Yes
2026-09-16 00:00	Easy Appointments <= 4.0.2.1 - Missing Authorization Easy Appointments <= 4.0.2.1	`CVE-2026-87965`	5.3 Medium	Morato Antoine	Yes
2026-09-10 00:00	Rox Appointment Booking – Appointment Booking Scheduling Solution < 1.2.0 - Payment Bypass to Unauthenticated Arbitrary Booking Price and Payment Method Bypass Rox Appointment Booking < 1.2.0	`CVE-2026-87892`	5.3 Medium	Morato Antoine	Yes

Showing 1–9 of 9 reports