tiborisaak

tiborisaak is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #539 of 3,878 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2026, with 4 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 5 of their findings (56%). Other recurring categories include Missing Authorization, Path Traversal. The average CVSS score across these disclosures is 6.3, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Ultimate Member (7), Advanced File Manager (1), Forminator Forms (1), across 3 distinct plugins, themes and core versions in total.

All 9 disclosed issues have since received a vendor fix. The most severe finding, "Ultimate Member <= 2.11.4 - Authenticated (Contributor+) Account Takeover via Password Reset Link Disclosure", scores 8.8 out of 10.