Viktor Markopoulos

Viktor Markopoulos is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #760 of 3,515 contributors. Their disclosures were published between 2021 and 2022. The most productive year was 2021, with 3 findings.

Their research concentrates on Code Injection, which accounts for 2 of their findings (40%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 6.7, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes SP Project & Document Manager (2), AcyMailing (1), Ad Inserter (1), across 4 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix. The most severe finding, "SP Project & Document Manager <= 4.21 - Authenticated Shell Upload", scores 8.8 out of 10.

20212022

Critical

High

Medium

Low

Global Rank

#760

of 3,515 researchers

Vulns

Critical0

High2

Medium3

Low0

Affected Assets

4plugins

Avg CVSS

6.7

Average score of vulnerabilities

Researcher Submissions

5 records


2022-06-28 00:00	SP Project & Document Manager <= 4.57 - Sensitive File Disclosure SP Project & Document Manager <= 4.57	`CVE-2022-1551`	5.3 Medium	Viktor Markopoulos	Yes
2022-02-03 00:00	Ad Inserter < 2.7.11 - Authenticated (Admin+) Remote Code Execution Ad Inserter < 2.7.11	`N/A`	7.2 High	Viktor Markopoulos	Yes
2021-05-25 00:00	SP Project & Document Manager <= 4.21 - Authenticated Shell Upload SP Project & Document Manager < 4.22	`CVE-2021-24347`	8.8 High	Viktor Markopoulos	Yes
2021-05-12 00:00	Weekly Schedule <= 3.4.2 - Stored Cross-Site Scripting Weekly Schedule < 3.4.3	`CVE-2021-24309`	6.1 Medium	Viktor Markopoulos	Yes
2021-04-29 00:00	AcyMailing SMTP Newsletter < 7.5.0 - Open Redirect AcyMailing < 7.5.0	`CVE-2021-24288`	6.1 Medium	Viktor Markopoulos	Yes

Showing 1–5 of 5 reports