Zbigniew Piotrak

Zbigniew Piotrak is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,441 of 3,515 contributors. Their disclosures were published between 2025 and 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (100%). The average CVSS score across these disclosures is 6.4, peaking at 6.4.

The most affected software includes Avada (Fusion) Builder (1), Betheme (1), across 2 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix.

20252026

Critical

High

Medium

Low

Global Rank

#1441

of 3,515 researchers

Vulns

Critical0

High0

Medium2

Low0

Affected Assets

1plugin1theme

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

2 records


2026-07-13 06:13	Avada Builder <= 3.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Title Avada (Fusion) Builder <= 3.15.5	`CVE-2026-12536`	6.4 Medium	Zbigniew Piotrak	Yes
2025-10-08 00:00	Betheme <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title' Betheme <= 28.1.6	`CVE-2025-9371`	6.4 Medium	Zbigniew Piotrak	Yes

Showing 1–2 of 2 reports