Bee

Bee is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #895 of 3,878 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 4 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (80%). Other recurring categories include SQL Injection. The average CVSS score across these disclosures is 4.8, peaking at 6.1.

The most affected software includes Community Events (2), Hostel (2), Ebook Store (1), across 3 distinct plugins, themes and core versions in total.

4 of the 5 disclosed issues have a vendor fix, while 1 remain unpatched.

20252026

Critical

High

Medium

Low

Global Rank

#895

of 3,878 researchers

Vulns

Critical0

High0

Medium5

Low0

Affected Assets

3plugins

Avg CVSS

4.8

Average score of vulnerabilities

Researcher Submissions

5 records


2026-09-21 19:02	Hostel <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_currency' Parameter and Localization file URL Setting Hostel <= 1.1.8	`CVE-2026-1645`	4.4 Medium	Bee	No
2026-04-17 11:44	Hostel <= 1.1.6 - Reflected Cross-Site Scripting via 'shortcode_id' Parameter Hostel <= 1.1.6	`CVE-2026-1838`	6.1 Medium	Bee	Yes
2026-03-06 11:49	Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field Community Events <= 1.5.8	`CVE-2026-2429`	4.9 Medium	Bee	Yes
2026-02-17 20:16	Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter Community Events <= 1.5.7	`CVE-2026-1649`	4.4 Medium	Bee	Yes
2025-07-21 09:53	Ebook Store <= 5.8012 - Authenticated (Administrator+) Stored Cross-Site Scripting via Order Details Ebook Store <= 5.8012	`CVE-2025-7486`	4.4 Medium	Bee	Yes

Showing 1–5 of 5 reports