0N0ise

0N0ise is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #789 of 3,515 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 2 of their findings (40%). Other recurring categories include Cross-Site Request Forgery (CSRF), Improper Handling Of Missing Values. The average CVSS score across these disclosures is 5.6, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes AMP for WP (1), Backup Migration (1), BackWPup (1), across 5 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#789

of 3,515 researchers

Vulns

Critical0

High1

Medium4

Low0

Affected Assets

5plugins

Avg CVSS

5.6

Average score of vulnerabilities

Researcher Submissions

5 records


2026-04-06 00:00	Backup Migration <= 2.0.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storage Backup Migration <= 2.0.0	`CVE-2025-14944`	5.3 Medium	0N0ise	Yes
2026-02-18 00:00	BackWPup 5.0.0 - 5.6.2 - Authenticated (BackWPup Helper+) Privilege Escalation via Arbitrary Options Update BackWPup 5.0.0 – 5.6.2	`CVE-2025-15041`	7.2 High	0N0ise	Yes
2026-02-18 00:00	Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values Simple Membership <= 4.7.0	`CVE-2026-1461`	6.5 Medium	0N0ise	Yes
2026-02-04 18:35	ShortPixel Image Optimizer <= 6.4.2 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' Parameter ShortPixel Image Optimizer <= 6.4.2	`CVE-2026-1246`	4.9 Medium	0N0ise	Yes
2026-01-06 16:00	AMP for WP – Accelerated Mobile Pages <= 1.1.9 - Cross-Site Request Forgery to Comment Submission AMP for WP <= 1.1.9	`CVE-2025-14468`	4.3 Medium	0N0ise	Yes

Showing 1–5 of 5 reports