Cody Sixteen

Cody Sixteen is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #968 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2025, with 3 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (100%). The average CVSS score across these disclosures is 4.9, peaking at 6.4.

The most affected software includes Booking Calendar (1), Fast Velocity Minify (1), Simple Banner (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

20252026

Critical

High

Medium

Low

Global Rank

#968

of 3,515 researchers

Vulns

Critical0

High0

Medium4

Low0

Affected Assets

4plugins

Avg CVSS

4.9

Average score of vulnerabilities

Researcher Submissions

4 records


2026-02-17 16:29	WP 404 Auto Redirect <= 1.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting WP 404 Auto Redirect to Similar Post <= 1.0.5	`CVE-2025-12037`	4.4 Medium	Cody Sixteen	Yes
2025-10-24 18:28	Fast Velocity Minify <= 3.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting Fast Velocity Minify <= 3.5.1	`CVE-2025-12034`	4.4 Medium	Cody Sixteen	Yes
2025-10-21 17:34	Simple Banner <= 3.0.10 - Authenticated (Admin+) Stored Cross-Site Scripting Simple Banner <= 3.0.10	`CVE-2025-12033`	4.4 Medium	Cody Sixteen	Yes
2025-08-27 00:00	Booking Calendar <= 10.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Booking Calendar <= 10.14.1	`CVE-2025-9346`	6.4 Medium	Cody Sixteen	Yes

Showing 1–4 of 4 reports