Chloe Chamberland

Chloe Chamberland is a security researcher credited with 163 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #48 of 3,515 contributors. Their disclosures were published between 2019 and 2026. The most productive year was 2021, with 55 findings.

Their research concentrates on Missing Authorization, which accounts for 33 of their findings (20%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting. The average CVSS score across these disclosures is 7.7, peaking at 10.0. Severity breakdown: 30 critical and 70 high.

The most affected software includes Tutor LMS (7), Ninja Forms (6), Email Subscribers & Newsletters (5), across 101 distinct plugins, themes and core versions in total.

160 of the 163 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Roles", scores 10.0 out of 10.

20192020202120222023202420252026
Critical
High
Medium
Low
Global Rank

#48

of 3,515 researchers

Vulns

163

Critical30
High70
Medium63
Low0
Affected Assets

162

115plugins47themes
Avg CVSS

7.7

Average score of vulnerabilities

Researcher Submissions

163 records
2026-09-11 18:49CVE-2026-78175
8.8
High
Chloe ChamberlandYes
2026-09-11 18:40CVE-2026-78159
9.8
Critical
Chloe ChamberlandYes
2026-09-11 18:39CVE-2026-78006
9.8
Critical
Chloe ChamberlandYes
2026-09-04 19:52CVE-2024-11080
9.8
Critical
Chloe ChamberlandYes
2026-07-28 13:28CVE-2026-12144
8.8
High
Chloe ChamberlandYes
2026-07-10 14:58CVE-2026-12141
4.9
Medium
Chloe ChamberlandYes
2026-07-09 15:21CVE-2026-13430
7.2
High
Chloe ChamberlandYes
2026-07-08 18:04CVE-2026-12170
6.4
Medium
Chloe ChamberlandYes
2026-07-01 19:58CVE-2026-12134
4.3
Medium
Chloe ChamberlandYes
2026-06-30 19:50CVE-2026-12158
8.8
High
Chloe ChamberlandYes
Showing 1–10 of 163 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C