Aurélien BOURDOIS (Elymaro)
Aurélien BOURDOIS (Elymaro) is a security researcher credited with 14 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #346 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2025, with 11 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (29%). Other recurring categories include SQL Injection, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 6.1, peaking at 8.8. Severity breakdown: 0 critical and 3 high.
The most affected software includes Contest Gallery (3), BitFire Security (2), Site.pro for WooCommerce (2), across 10 distinct plugins, themes and core versions in total.
12 of the 14 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI", scores 8.8 out of 10.
#346
of 3,515 researchers
14
10
6.1
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C