Anthropic

Anthropic is a security researcher credited with 7 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #702 of 3,917 contributors. The disclosure was published in 2026.

Their research concentrates on Improper Neutralization Of Input During Web Page Generation, which accounts for 2 of their findings (29%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Improper Limitation Of A Pathname To A Restricted Directory. The average CVSS score across these disclosures is 4.5, peaking at 4.9.

The most affected software includes WordPress 7.1 (7), across 1 distinct plugins, themes and core versions in total.

All 7 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#702

of 3,917 researchers

Vulns

Critical0

High0

Medium7

Low0

Affected Assets

1core version

Avg CVSS

4.5

Average score of vulnerabilities

Researcher Submissions

7 records


2026-10-29 00:00	WordPress Core 4.7.0 - 7.1.3 - Authenticated (Custom+) Stored Cross-Site Scripting via Externally-Supplied User Login Values WordPress 7.1 4.7.0 – 7.1.3 · 25 branches	`N/A`	4.9 Medium	Anthropic	Yes
2026-10-29 00:00	WordPress Core 4.9.6 - 7.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via Personal Data Erasure Request Email Addresses WordPress 7.1 4.9.6 – 7.1.3 · 23 branches	`N/A`	4.4 Medium	Anthropic	Yes
2026-10-07 00:00	WordPress Core 6.5.0 - 7.1.2 - Authenticated (Author+) Second-Order SQL Injection via WXR Export WordPress 7.1 6.5.0 – 7.1.2 · 7 branches	`N/A`	4.8 Medium	Anthropic	Yes
2026-10-07 00:00	WordPress Core 4.7.0 - 7.1.2 - Authenticated (Author+) Unauthorized Sticky Post Modification via REST API WordPress 7.1 4.7.0 – 7.1.2 · 25 branches	`N/A`	4.3 Medium	Anthropic	Yes
2026-10-07 00:00	WordPress Core 4.7.0 - 7.1.2 - Authenticated (Contributor+) Denial of Service via Block Editor URL Details WordPress 7.1 4.7.0 – 7.1.2 · 25 branches	`N/A`	4.3 Medium	Anthropic	Yes
2026-09-17 00:00	WordPress Core <= 7.1 - Authenticated (Contributor+) Path Traversal via REST Templates Controller WordPress 7.1 5.8 – 7.1 · 6 branches	`N/A`	4.3 Medium	Anthropic	Yes
2026-09-17 00:00	WordPress Core <= 7.1 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Post Overwrite WordPress 7.1 6.6.7 – 7.1 · 6 branches	`N/A`	4.3 Medium	Anthropic	Yes

Showing 1–7 of 7 reports