SecondGateWP

SecondGateWP is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,361 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 3 of their findings (100%). The average CVSS score across these disclosures is 4.3, peaking at 4.3.

The most affected software includes Gratisfaction- Loyalty (1), Scratch & Win (1), Social Boost (1), across 3 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1361

of 3,823 researchers

Vulns

Critical0

High0

Medium3

Low0

Affected Assets

3plugins

Avg CVSS

4.3

Average score of vulnerabilities

Researcher Submissions

3 records


2026-10-03 17:46	Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more <= 3.0.2 - Missing Authorization Scratch & Win <= 3.0.2	`CVE-2026-97303`	4.3 Medium	SecondGateWP	Yes
2026-10-01 13:30	Social Boost: Giveaways, Instant win and Contests. Grow followers, shares, subscribers, traffic, referrals, sales and more <= 3.6.2 - Missing Authorization Social Boost <= 3.6.2	`CVE-2026-97277`	4.3 Medium	SecondGateWP	Yes
2026-10-01 12:26	Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program <= 4.6.3 - Missing Authorization Gratisfaction- Loyalty <= 4.6.3	`CVE-2026-97297`	4.3 Medium	SecondGateWP	Yes

Showing 1–3 of 3 reports