benzdeus

benzdeus is a security researcher credited with 51 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #128 of 3,908 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 33 findings.

Their research concentrates on Missing Authorization, which accounts for 25 of their findings (49%). Other recurring categories include Improper Neutralization Of Input During Web Page Generation, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 5.2, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes SMS Alert (3), Astra Widgets (1), BEAR (1), across 49 distinct plugins, themes and core versions in total.

48 of the 51 disclosed issues have a vendor fix, while 3 remain unpatched.

20252026
Critical
High
Medium
Low
Global Rank

#128

of 3,908 researchers

Vulns

51

Critical0
High1
Medium50
Low0
Affected Assets

49

49plugins
Avg CVSS

5.2

Average score of vulnerabilities

Researcher Submissions

51 records
2026-10-08 00:00CVE-2026-106603
5.3
Medium
benzdeusYes
2026-09-23 09:45CVE-2026-94118
6.4
Medium
benzdeusYes
2026-09-16 18:13CVE-2026-74005
4.3
Medium
benzdeusYes
2026-09-11 00:00CVE-2026-62106
6.3
Medium
benzdeusYes
2026-09-11 00:00CVE-2026-62102
6.3
Medium
benzdeusYes
2026-09-07 13:37CVE-2026-81802
5.3
Medium
benzdeusYes
2026-09-02 00:00CVE-2026-84835
5.3
Medium
benzdeusNo
2026-07-22 00:00CVE-2026-65452
5.3
Medium
benzdeusYes
2026-06-02 00:00CVE-2026-27351
4.3
Medium
benzdeusYes
2026-06-01 00:00CVE-2026-27089
5.3
Medium
benzdeusYes
Showing 1–10 of 51 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C