Chuck

Chuck is a security researcher credited with 20 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #250 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on Cross-Site Scripting, which accounts for 12 of their findings (60%). Other recurring categories include Missing Authorization, Improper Privilege Management. The average CVSS score across these disclosures is 7.0, peaking at 9.8. Severity breakdown: 1 critical and 5 high.

The most affected software includes IRM Newsroom (3), Aeropage Sync for Airtable (2), 360 Photo Spheres (1), across 17 distinct plugins, themes and core versions in total.

11 of the 20 disclosed issues have a vendor fix, while 9 remain unpatched. The most severe finding, "Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.

2025
Critical
High
Medium
Low
Global Rank

#250

of 3,515 researchers

Vulns

20

Critical1
High5
Medium14
Low0
Affected Assets

17

17plugins
Avg CVSS

7.0

Average score of vulnerabilities

Researcher Submissions

20 records
2025-08-01 18:50CVE-2025-4588
6.4
Medium
ChuckNo
2025-06-30 00:00CVE-2025-28976
6.4
Medium
ChuckNo
2025-06-26 19:05CVE-2025-4587
6.4
Medium
ChuckNo
2025-06-25 13:47CVE-2025-4334
9.8
Critical
ChuckYes
2025-06-12 13:12CVE-2025-4586
6.4
Medium
ChuckYes
2025-06-12 13:12CVE-2025-4584
6.4
Medium
ChuckYes
2025-06-12 13:12CVE-2025-4585
6.4
Medium
ChuckYes
2025-06-02 20:13CVE-2025-4420
6.4
Medium
ChuckYes
2025-05-30 18:09CVE-2025-4590
6.4
Medium
ChuckYes
2025-05-30 18:08CVE-2025-4595
6.4
Medium
ChuckNo
Showing 1–10 of 20 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C