Aurélien BOURDOIS (Elymaro)
Aurélien BOURDOIS (Elymaro) is a security researcher credited with 16 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #345 of 3,878 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2025, with 11 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 5 of their findings (31%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, SQL Injection. The average CVSS score across these disclosures is 6.0, peaking at 8.8. Severity breakdown: 0 critical and 3 high.
The most affected software includes Contest Gallery (3), BitFire Security (2), Site.pro for WooCommerce (2), across 12 distinct plugins, themes and core versions in total.
13 of the 16 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI", scores 8.8 out of 10.
#345
of 3,878 researchers
16
12
6.0
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C