Brian Willows
Brian Willows is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,048 of 3,823 contributors. The disclosure was published in 2026.
Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 2 of their findings (50%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 5.3, peaking at 7.2. Severity breakdown: 0 critical and 1 high.
The most affected software includes GeoDirectory (1), HashBar (1), Lightbox (1), across 4 distinct plugins, themes and core versions in total.
3 of the 4 disclosed issues have a vendor fix, while 1 remain unpatched.
#1048
of 3,823 researchers
4
4
5.3
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C