Stefan Löwen

Stefan Löwen is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,587 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Client-Side Enforcement Of Server-Side Security, which accounts for 2 of their findings (100%). The average CVSS score across these disclosures is 6.3, peaking at 6.3.

The most affected software includes Wallet System for WooCommerce (2), across 1 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1587

of 3,823 researchers

Vulns

Critical0

High0

Medium2

Low0

Affected Assets

1plugin

Avg CVSS

6.3

Average score of vulnerabilities

Researcher Submissions

2 records


2026-10-08 00:00	Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments < 2.8.0 - Authenticated (Subscriber+) Fraudulent Wallet Balance Manipulation Wallet System for WooCommerce < 2.8.0	`CVE-2026-93509`	6.3 Medium	Stefan Löwen	Yes
2026-10-06 00:00	Wallet System for WooCommerce 2.0.0 - 2.7.10 - Authenticated (Subscriber+) Arbitrary Wallet Balance Manipulation Wallet System for WooCommerce 2.0.0 – 2.7.10	`CVE-2026-93509`	6.3 Medium	Stefan Löwen	Yes

Showing 1–2 of 2 reports