Teemu Saarentaus

Teemu Saarentaus is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #823 of 3,515 contributors. The disclosure was published in 2026.

Their research concentrates on Improper Privilege Management, which accounts for 3 of their findings (75%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 9.2, peaking at 9.8. Severity breakdown: 3 critical and 1 high.

The most affected software includes Wholesale Lead Capture Plugin… (2), Modular DS (1), Wholesale Suite (1), across 3 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix. The most severe finding, "Woocommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.

2026

Critical

High

Medium

Low

Global Rank

#823

of 3,515 researchers

Vulns

Critical3

High1

Medium0

Low0

Affected Assets

3plugins

Avg CVSS

9.2

Average score of vulnerabilities

Researcher Submissions

4 records


2026-02-20 00:00	Woocommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation Wholesale Lead Capture Plugin… <= 2.0.3.1	`CVE-2026-27542`	9.8 Critical	Teemu Saarentaus	Yes
2026-02-20 00:00	Wholesale Suite <= 2.2.6 - Authenticated (Shop Manager) Privilege Escalation Wholesale Suite <= 2.2.6	`CVE-2026-27541`	7.2 High	Teemu Saarentaus	Yes
2026-02-20 00:00	Woocommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Arbitrary File Upload Wholesale Lead Capture Plugin… <= 2.0.3.1	`CVE-2026-27540`	9.8 Critical	Teemu Saarentaus	Yes
2026-01-14 00:00	Modular DS <= 2.5.1 - Unauthenticated Privilege Escalation Modular DS <= 2.5.1	`CVE-2026-23550`	9.8 Critical	Teemu Saarentaus	Yes

Showing 1–4 of 4 reports