Stefan Spasic
Stefan Spasic is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,360 of 3,823 contributors. The disclosure was published in 2026.
Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 2 of their findings (67%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 4.3, peaking at 4.3.
The most affected software includes Academy LMS (1), Hydra Booking (1), Wallet System for WooCommerce (1), across 3 distinct plugins, themes and core versions in total.
2 of the 3 disclosed issues have a vendor fix, while 1 remain unpatched.
#1360
of 3,823 researchers
3
3
4.3
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C