0xzenko
0xzenko is a security researcher credited with 6 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #724 of 3,823 contributors. The disclosure was published in 2026.
Their research concentrates on Authentication Bypass By Alternate Name, which accounts for 1 of their findings (17%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 6.3, peaking at 8.1. Severity breakdown: 0 critical and 3 high.
The most affected software includes CloudSecure WP Security (1), DirectoryPress (1), Easy Appointments (1), across 6 distinct plugins, themes and core versions in total.
3 of the 6 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.27 - Unauthenticated Local File Inclusion", scores 8.1 out of 10.
#724
of 3,823 researchers
6
6
6.3
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C