Thomas Chauchefoin

Thomas Chauchefoin is a security researcher credited with 6 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #714 of 3,878 contributors. Their disclosures were published between 2018 and 2026. The most productive year was 2019, with 2 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (50%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Server-Side Request Forgery (SSRF). The average CVSS score across these disclosures is 7.2, peaking at 9.8. Severity breakdown: 2 critical and 1 high.

The most affected software includes Duplicator (1), Social Preview and Open Graph Tags (1), W3 Total Cache (1), across 6 distinct plugins, themes and core versions in total.

5 of the 6 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "WP Statistics <= 12.6.6.1 - Unauthenticated Blind SQL Injection", scores 9.8 out of 10.