Brian Mungai

Brian Mungai is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #616 of 3,878 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2025, with 6 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 3 of their findings (38%). Other recurring categories include Missing Authorization, Authorization Bypass Through User-Controlled Key. The average CVSS score across these disclosures is 5.2, peaking at 7.5. Severity breakdown: 0 critical and 1 high.

The most affected software includes Asgaros Forum (1), bbPress (1), BuddyPress (1), across 8 distinct plugins, themes and core versions in total.

All 8 disclosed issues have since received a vendor fix.

20252026
Critical
High
Medium
Low
Global Rank

#616

of 3,878 researchers

Vulns

8

Critical0
High1
Medium7
Low0
Affected Assets

8

8plugins
Avg CVSS

5.2

Average score of vulnerabilities

Researcher Submissions

8 records
2026-10-09 19:11CVE-2026-93746
7.5
High
Brian MungaiYes
2026-09-10 21:43CVE-2024-12145
4.3
Medium
Brian MungaiYes
2025-11-11 15:30CVE-2025-12901
4.3
Medium
Brian MungaiYes
2025-11-07 00:00CVE-2025-12498
4.3
Medium
Brian MungaiYes
2025-03-04 00:00CVE-2025-1435
6.3
Medium
Brian MungaiYes
2025-02-27 16:23CVE-2025-1506
4.3
Medium
Brian MungaiYes
2025-01-24 18:53CVE-2024-12113
4.3
Medium
Brian MungaiYes
2025-01-06 00:00CVE-2024-12738
6.1
Medium
Brian MungaiYes
Showing 1–8 of 8 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C