crow
crow is a security researcher credited with 22 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #266 of 3,917 contributors. The disclosure was published in 2026.
Their research concentrates on Improper Neutralization Of Input During Web Page Generation, which accounts for 14 of their findings (64%). Other recurring categories include Improper Control Of Filename For Include/Require Statement In PHP Program, Improper Privilege Management. The average CVSS score across these disclosures is 6.5, peaking at 8.1. Severity breakdown: 0 critical and 12 high.
The most affected software includes AMP for WP (1), BA Book Everything (1), Bit integrations (1), across 22 distinct plugins, themes and core versions in total.
All 22 disclosed issues have since received a vendor fix. The most severe finding, "ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameter", scores 8.1 out of 10.
#266
of 3,917 researchers
22
22
6.5
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C