Avraham Shemesh

Avraham Shemesh is a security researcher credited with 26 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #209 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on Cross-Site Scripting, which accounts for 13 of their findings (50%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Code Injection. The average CVSS score across these disclosures is 6.2, peaking at 7.3. Severity breakdown: 0 critical and 5 high.

The most affected software includes Accept SagePay Payments Using Contact… (1), Advanced Accordion Gutenberg Block (1), AI Content Pipelines (1), across 26 distinct plugins, themes and core versions in total.

12 of the 26 disclosed issues have a vendor fix, while 14 remain unpatched.

2025
Critical
High
Medium
Low
Global Rank

#209

of 3,515 researchers

Vulns

26

Critical0
High5
Medium21
Low0
Affected Assets

26

26plugins
Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

26 records
2025-10-31 13:31CVE-2025-11174
5.3
Medium
Avraham ShemeshYes
2025-10-07 16:43CVE-2025-11171
5.3
Medium
Avraham ShemeshYes
2025-05-05 16:07CVE-2025-2802
7.3
High
Avraham ShemeshNo
2025-05-01 13:10CVE-2025-2880
5.3
Medium
Avraham ShemeshNo
2025-04-30 00:00CVE-2025-1529
6.4
Medium
Avraham ShemeshYes
2025-04-25 15:01CVE-2025-2801
7.3
High
Avraham ShemeshNo
2025-04-24 16:58CVE-2025-2580
4.9
Medium
Avraham ShemeshYes
2025-04-23 19:59CVE-2025-2543
6.4
Medium
Avraham ShemeshYes
2025-04-23 19:57CVE-2025-2579
6.4
Medium
Avraham ShemeshYes
2025-04-11 14:19CVE-2025-2841
5.3
Medium
Avraham ShemeshNo
Showing 1–10 of 26 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C