Talal Nasraddeen

Talal Nasraddeen is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #508 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2025, with 5 findings.

Their research concentrates on Unrestricted Upload Of File With Dangerous Type, which accounts for 5 of their findings (63%). Other recurring categories include SQL Injection, Improper Input Validation. The average CVSS score across these disclosures is 9.0, peaking at 9.8. Severity breakdown: 5 critical and 3 high.

The most affected software includes Gravity Forms (2), PPOM (2), ERP (1), across 6 distinct plugins, themes and core versions in total.

All 8 disclosed issues have since received a vendor fix. The most severe finding, "ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment", scores 9.8 out of 10.