spacehen

spacehen is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #707 of 3,515 contributors. Their disclosures were published between 2021 and 2026. The most productive year was 2021, with 4 findings.

Their research concentrates on Unrestricted Upload Of File With Dangerous Type, which accounts for 3 of their findings (60%). Other recurring categories include Incorrect Privilege Assignment, Missing Authorization. The average CVSS score across these disclosures is 9.7, peaking at 9.8. Severity breakdown: 5 critical and 0 high.

The most affected software includes 3DPrint Lite (1), Download from files (1), JS Job Manager (1), across 5 distinct plugins, themes and core versions in total.

3 of the 5 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "TheCartPress eCommerce Shopping Cart <= 1.5.3.6 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.