tiborisaak

tiborisaak is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #542 of 3,515 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2026, with 3 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (50%). Other recurring categories include Missing Authorization, Path Traversal. The average CVSS score across these disclosures is 6.2, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes Ultimate Member (7), Advanced File Manager (1), across 2 distinct plugins, themes and core versions in total.

All 8 disclosed issues have since received a vendor fix. The most severe finding, "Ultimate Member <= 2.11.4 - Authenticated (Contributor+) Account Takeover via Password Reset Link Disclosure", scores 8.8 out of 10.