0xbro

0xbro is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,408 of 3,515 contributors. Their disclosures were published between 2025 and 2026.

Their research concentrates on Deserialization Of Untrusted Data, which accounts for 1 of their findings (50%). Other recurring categories include Incorrect Authorization. The average CVSS score across these disclosures is 6.8, peaking at 8.1. Severity breakdown: 0 critical and 1 high.

The most affected software includes Prevent Direct Access (1), Profile Builder Pro (1), across 2 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix. The most severe finding, "Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection", scores 8.1 out of 10.

20252026
Critical
High
Medium
Low
Global Rank

#1408

of 3,515 researchers

Vulns

2

Critical0
High1
Medium1
Low0
Affected Assets

2

2plugins
Avg CVSS

6.8

Average score of vulnerabilities

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C