ayato

ayato is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,240 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (100%). The average CVSS score across these disclosures is 4.4, peaking at 4.4.

The most affected software includes MaxButtons (1), User Registration & Membership (1), Web Accessibility (formally known as… (1), across 3 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix.

2025

Critical

High

Medium

Low

Global Rank

#1240

of 3,515 researchers

Vulns

Critical0

High0

Medium3

Low0

Affected Assets

3plugins

Avg CVSS

4.4

Average score of vulnerabilities

Researcher Submissions

3 records


2025-04-17 00:00	MaxButtons <= 9.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting MaxButtons <= 9.8.3	`CVE-2025-39444`	4.4 Medium	ayato	Yes
2025-04-09 00:00	One Click Accessibility <= 3.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Web Accessibility (formally known as… <= 3.1.0	`CVE-2025-32640`	4.4 Medium	ayato	Yes
2025-03-27 00:00	User Registration <= 4.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting User Registration & Membership <= 4.0.3	`CVE-2025-30899`	4.4 Medium	ayato	Yes

Showing 1–3 of 3 reports