bosz
bosz is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,178 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 2 findings.
Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 1 of their findings (33%). Other recurring categories include Improper Restriction Of XML External Entity Reference, Missing Authorization. The average CVSS score across these disclosures is 5.7, peaking at 7.5. Severity breakdown: 0 critical and 1 high.
The most affected software includes Demo Importer Plus (1), Download Plugins and Themes in ZIP… (1), GamiPress (1), across 3 distinct plugins, themes and core versions in total.
All 3 disclosed issues have since received a vendor fix.
#1178
of 3,515 researchers
3
3
5.7
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C