Slavco Mihajloski

Slavco Mihajloski is a security researcher credited with 16 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #295 of 3,515 contributors. Their disclosures were published between 2016 and 2020. The most productive year was 2020, with 5 findings.

Their research concentrates on SQL Injection, which accounts for 5 of their findings (31%). Other recurring categories include Code Injection, Cross-Site Scripting. The average CVSS score across these disclosures is 8.1, peaking at 9.8. Severity breakdown: 3 critical and 9 high.

The most affected software includes Photo Gallery (2), WooCommerce (2), Abandoned Cart Lite for WooCommerce (1), across 14 distinct plugins, themes and core versions in total.

15 of the 16 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Abandoned Cart Lite for WooCommerce <= 5.8.2 - SQL Injection", scores 9.8 out of 10.

20162017201820192020

Critical

High

Medium

Low

Global Rank

#295

of 3,515 researchers

Vulns

Critical3

High9

Medium4

Low0

Affected Assets

10plugins4core versions

Avg CVSS

8.1

Average score of vulnerabilities

Researcher Submissions

16 records


2020-11-08 00:00	Abandoned Cart Lite for WooCommerce <= 5.8.2 - SQL Injection Abandoned Cart Lite for WooCommerce <= 5.8.2	`N/A`	9.8 Critical	Slavco Mihajloski	Yes
2020-10-29 00:00	WordPress Core < 5.5.2 - Arbitrary File Deletion WordPress 5.5 3.7 – 5.5.1 · 20 branches	`CVE-2020-28039`	5.4 Medium	Slavco Mihajloski	Yes
2020-09-22 00:00	Coditor <= 1.1 - Remote Code Execution Coditor <= 1.1	`N/A`	8.8 High	Slavco Mihajloski	No
2020-09-22 00:00	Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Cross-Site Request Forgery to Plugin Installation Ninja Forms <= 3.4.27	`CVE-2020-36174`	8.8 High	Slavco Mihajloski	Yes
2020-05-05 00:00	WooCommerce <= 4.0.4 - Unauthorized Post Meta Creation/Modification WooCommerce < 4.1.0	`N/A`	8.8 High	Slavco Mihajloski	Yes
2019-02-15 00:00	Advanced Custom Fields <= 5.7.11 - PHP Object Injection Advanced Custom Fields (ACF®) <= 5.7.11	`N/A`	5.4 Medium	Slavco Mihajloski	Yes
2019-02-04 00:00	NextGen Gallery <= 3.1.5 - PHP Object Injection Photo Gallery <= 3.1.5	`N/A`	8.8 High	Slavco Mihajloski	Yes
2018-12-12 00:00	WordPress Core < 5.0.1 - Stored Cross-Site Scripting via File Uploads WordPress 5.0 3.7 – 5.0 · 15 branches	`CVE-2018-20149`	6.4 Medium	Tim Coen	Yes
2018-11-06 00:00	WooCommerce <= 3.4.5 - WooCommerce File Deletion WooCommerce < 3.4.6	`CVE-2018-20714`	7.2 High	Simon Scannell	Yes
2018-07-05 00:00	WordPress Core < 4.9.7 - Authenticated Arbitrary File Deletion WordPress 4.9 3.7 – 4.9.6 · 14 branches	`CVE-2018-12895`	8.8 High	Matt Barry	Yes

Showing 1–10 of 16 reports