Raphael P. Cigana

Raphael P. Cigana is a security researcher credited with 15 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #362 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Exposure Of Sensitive Information To An Unauthorized Actor, which accounts for 3 of their findings (20%). Other recurring categories include Improper Privilege Management, Missing Authorization. The average CVSS score across these disclosures is 6.3, peaking at 9.8. Severity breakdown: 1 critical and 6 high.

The most affected software includes MCP Server for WordPress (3), Mobile builder (2), SMS Alert (2), across 9 distinct plugins, themes and core versions in total.

13 of the 15 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "SMS Alert <= 4.0.0 - Unauthenticated Arbitrary Account Takeover", scores 9.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#362

of 3,823 researchers

Vulns

15

Critical1
High6
Medium8
Low0
Affected Assets

9

9plugins
Avg CVSS

6.3

Average score of vulnerabilities

Researcher Submissions

15 records
2026-10-14 00:00CVE-2026-106099
5.3
Medium
Raphael P. CiganaYes
2026-10-14 00:00CVE-2026-108069
5.3
Medium
Raphael P. CiganaYes
2026-10-09 00:00CVE-2026-103695
7.5
High
Raphael P. CiganaNo
2026-10-09 00:00CVE-2026-103694
6.3
Medium
Raphael P. CiganaNo
2026-10-08 00:00CVE-2026-94256
9.8
Critical
Raphael P. CiganaYes
2026-10-08 00:00CVE-2026-94257
7.3
High
Raphael P. CiganaYes
2026-10-05 00:00CVE-2026-97188
8.1
High
Raphael P. CiganaYes
2026-10-05 00:00CVE-2026-103323
5.3
Medium
Raphael P. CiganaYes
2026-10-01 13:39CVE-2026-103752
7.3
High
Raphael P. CiganaYes
2026-09-28 00:00CVE-2026-92994
7.2
High
Raphael P. CiganaYes
Showing 1–10 of 15 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C