TAD Group

TAD Group is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #835 of 3,515 contributors. Their disclosures were published between 2016 and 2026. The most productive year was 2026, with 3 findings.

Their research concentrates on SQL Injection, which accounts for 4 of their findings (100%). The average CVSS score across these disclosures is 8.1, peaking at 9.8. Severity breakdown: 1 critical and 3 high.

The most affected software includes kittycatfish (1), mwp-viral-signup (1), Olimometer (1), across 4 distinct plugins, themes and core versions in total.

1 of the 4 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "Olimometer < 2.57 - SQL Injection", scores 9.8 out of 10.

2017201820192020202120222023202420252026

Critical

High

Medium

Low

Global Rank

#835

of 3,515 researchers

Vulns

Critical1

High3

Medium0

Low0

Affected Assets

4plugins

Avg CVSS

8.1

Average score of vulnerabilities

Researcher Submissions

4 records


2026-06-09 00:00	Simply Poll <= 1.4.1 - Unauthenticated SQL Injection simply-poll <= 1.4.1	`CVE-2016-20062`	7.5 High	TAD Group	No
2026-06-09 00:00	KittyCatfish <= 2.2 - Unauthenticated SQL Injection kittycatfish <= 2.2	`CVE-2017-20246`	7.5 High	TAD Group	No
2026-06-09 00:00	Wow Viral Signups <= 2.1 - Unauthenticated SQL Injection mwp-viral-signup <= 2.1	`CVE-2017-20245`	7.5 High	TAD Group	No
2016-11-22 00:00	Olimometer < 2.57 - SQL Injection Olimometer < 2.57	`CVE-2016-10904`	9.8 Critical	TAD Group	Yes

Showing 1–4 of 4 reports