Spider Sec Ltd

Spider Sec Ltd is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,108 of 3,515 contributors. Their disclosures were published between 2020 and 2026. The most productive year was 2020, with 2 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (100%). The average CVSS score across these disclosures is 6.6, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Ninja Forms (1), Popup Box (1), RegistrationMagic (1), across 3 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix.

2020202120222023202420252026

Critical

High

Medium

Low

Global Rank

#1108

of 3,515 researchers

Vulns

Critical0

High1

Medium2

Low0

Affected Assets

3plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

3 records


2026-04-08 00:00	Popup Box – Create Countdown, Coupon, Video, Contact Form Popups < 5.5.0 - Unauthenticated Stored Cross-Site Scripting Popup Box < 5.5.0	`CVE-2025-15611`	7.2 High	Spider Sec Ltd	Yes
2020-02-03 00:00	Ninja Forms Contact Form <= 3.4.22 - Stored Cross-Site Scripting Ninja Forms < 3.4.23	`CVE-2020-8594`	6.4 Medium	Spider Sec Ltd	Yes
2020-01-30 00:00	RegistrationMagic – Custom Registration Forms, User Registration and User Login Plugin <= 4.6.0.1 - Cross-Site Scripting RegistrationMagic <= 4.6.0.1	`CVE-2020-8436`	6.1 Medium	Spider Sec Ltd	Yes

Showing 1–3 of 3 reports