san6051

san6051 is a security researcher credited with 20 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #293 of 3,899 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 15 of their findings (75%). Other recurring categories include Improper Input Validation, SQL Injection. The average CVSS score across these disclosures is 5.4, peaking at 7.2. Severity breakdown: 0 critical and 2 high.

The most affected software includes MinhNhut Link Gateway (3), CM Custom Reports (2), Keep Backup Daily (2), across 13 distinct plugins, themes and core versions in total.

6 of the 20 disclosed issues have a vendor fix, while 14 remain unpatched.

2026

Critical

High

Medium

Low

Global Rank

#293

of 3,899 researchers

Vulns

Critical0

High2

Medium17

Low1

Affected Assets

13plugins

Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

20 records


2026-09-18 19:42	WP Optimizer <= 2.5.0 - Authenticated (Administrator+) SQL Injection via 's' Parameter WP Optimizer <= 2.5.0	`CVE-2026-6295`	4.9 Medium	san6051	Yes
2026-07-20 19:29	MapSVG <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint MapSVG <= 8.14.0	`CVE-2026-1771`	7.2 High	san6051	Yes
2026-06-01 19:45	Word Replacer <= 0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Replacement' Parameter Word Replacer <= 0.4	`CVE-2026-3620`	4.4 Medium	san6051	No
2026-06-01 19:44	hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting via 'new_domain' Parameter hiWeb Migration Simple <= 2.0.0.1	`CVE-2026-2425`	6.1 Medium	san6051	No
2026-06-01 19:44	rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'a' Parameter rognone <= 0.6.2	`CVE-2026-1451`	6.1 Medium	san6051	No
2026-06-01 19:44	rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'mode' Parameter rognone <= 0.6.2	`CVE-2026-1450`	6.1 Medium	san6051	No
2026-05-26 20:48	MinhNhut Link Gateway <= 3.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting via Plugin Settings MinhNhut Link Gateway <= 3.6.1	`CVE-2026-3348`	4.4 Medium	san6051	No
2026-05-26 20:48	MinhNhut Link Gateway <= 3.6.1 - Reflected Cross-Site Scripting via 'url' Parameter MinhNhut Link Gateway <= 3.6.1	`CVE-2026-3349`	6.1 Medium	san6051	No
2026-05-26 20:46	myLinksDump <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'link_title' Parameter myLinksDump <= 1.6	`CVE-2026-2288`	4.8 Medium	san6051	No
2026-05-26 20:44	rexCrawler <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings rexCrawler <= 1.0.15	`CVE-2026-2280`	4.8 Medium	san6051	No

Showing 1–10 of 20 reports