Asim Alshaya
Asim Alshaya is a security researcher credited with 42 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #158 of 3,823 contributors. The disclosure was published in 2026.
Their research concentrates on Cross-Site Scripting, which accounts for 13 of their findings (31%). Other recurring categories include Missing Authorization, Deserialization Of Untrusted Data. The average CVSS score across these disclosures is 6.3, peaking at 8.1. Severity breakdown: 0 critical and 21 high.
The most affected software includes Ultimate Maps by Supsystic (3), AcyMailing (2), Contact Form by Supsystic (2), across 34 distinct plugins, themes and core versions in total.
38 of the 42 disclosed issues have a vendor fix, while 4 remain unpatched. The most severe finding, "Smart Popup by Supsystic <= 1.13.0 - Unauthenticated PHP Object Injection", scores 8.1 out of 10.
#158
of 3,823 researchers
42
34
6.3
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C