Mor Golan
Photo of Mor Golan

Mor Golan

Cybersecurity Team Lead · Red Team · Penetration Testing · OSCP

I'm Mor Golan, an OSCP certified cybersecurity team lead and vulnerability researcher at QMasters Cyber Security Services in Israel, leading penetration testing, cyber threat intelligence, DFIR, SOAR and vulnerability assessment.
I work both sides of the attack lifecycle, running offensive engagements and leading incident response, and I have published multiple CVEs through independent research.
I'm also an active bug bounty hunter on HackerOne, Bugcrowd, Intigriti and YesWeHack.

Badges

Profiles

Latest research

All writeups →

Latest CVEs

All 10 CVEs →
  1. CVE-2026-122675 Medium 5.4

    Cross Site Request Forgery (CSRF) in Wp Social

    WordPress plugin · versions ≤ 3.2.3 · fixed in 3.2.4 · · Advisory · Writeup

  2. CVE-2026-39732 Critical 9.3

    SQL Injection in Transliterator

    WordPress plugin · versions ≤ 2.5.13 · fixed in 2.5.14 · · Advisory · Writeup

  3. CVE-2026-61989 High 7.1

    Cross Site Scripting (XSS) in Easy Property Listings

    WordPress plugin · versions ≤ 3.5.25 · fixed in 3.5.26 · · Advisory · Writeup

  4. CVE-2026-115596 High 7.1

    Cross Site Scripting (XSS) in eCommerce Product Catalog

    WordPress plugin · versions ≤ 3.6.4 · fixed in 3.6.5 · · Advisory · Writeup

  5. CVE-2026-112869 High 7.1

    Cross Site Scripting (XSS) in We’re Open!

    WordPress plugin · versions ≤ 2.6 · fixed in 2.7 · · Advisory · Writeup

Projects