0xwackydawg

0xwackydawg is a security researcher credited with 7 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #585 of 3,438 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 7 of their findings (100%). The average CVSS score across these disclosures is 6.1, peaking at 6.1.

The most affected software includes AzonPost (1), Blog Settings (1), CBX 5 Star Rating & Review (1), across 7 distinct plugins, themes and core versions in total.

1 of the 7 disclosed issues have a vendor fix, while 6 remain unpatched.

2026

Critical

High

Medium

Low

Global Rank

#585

of 3,438 researchers

Vulns

Critical0

High0

Medium7

Low0

Affected Assets

7plugins

Avg CVSS

6.1

Average score of vulnerabilities

Researcher Submissions

7 records


2026-05-21 14:51	CBX 5 Star Rating & Review <= 1.0.7 - Reflected Cross-Site Scripting via 'page' Parameter CBX 5 Star Rating & Review <= 1.0.7	`CVE-2026-6864`	6.1 Medium	0xwackydawg	Yes
2026-05-19 12:06	VatanSMS WP SMS <= 1.01 - Reflected Cross-Site Scripting via 'page' Parameter VatanSMS WP SMS <= 1.01	`CVE-2026-7462`	6.1 Medium	0xwackydawg	No
2026-05-11 19:06	WP Google Maps Integration <= 1.2 - Reflected Cross-Site Scripting via 'page' Parameter WP Google Maps Integration <= 1.2	`CVE-2026-7464`	6.1 Medium	0xwackydawg	No
2026-05-11 19:06	AzonPost <= 1.3 - Reflected Cross-Site Scripting AzonPost <= 1.3	`CVE-2026-7437`	6.1 Medium	0xwackydawg	No
2026-05-11 19:05	Pricing Tables for WP <= 1.1.0 - Reflected Cross-Site Scripting via 'page' Parameter Pricing Tables for WP <= 1.1.0	`CVE-2026-6808`	6.1 Medium	0xwackydawg	No
2026-05-04 14:07	Blog Settings <= 1.0 - Reflected Cross-Site Scripting via 'page' Parameter Blog Settings <= 1.0	`CVE-2026-6704`	6.1 Medium	0xwackydawg	No
2026-05-04 14:07	Zingaya Click-to-Call <= 1.0 - Reflected Cross-Site Scripting via 'email' Parameter Zingaya Click-to-Call <= 1.0	`CVE-2026-6696`	6.1 Medium	0xwackydawg	No

Showing 1–7 of 7 reports