Daniel Púa - devploit
Daniel Púa - devploit is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,109 of 3,333 contributors. The disclosure was published in 2026.
Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 1 of their findings (33%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, SQL Injection. The average CVSS score across these disclosures is 5.7, peaking at 7.5. Severity breakdown: 0 critical and 1 high.
The most affected software includes LifterLMS (1), User Registration & Membership (1), WP Photo Album Plus (1), across 3 distinct plugins, themes and core versions in total.
All 3 disclosed issues have since received a vendor fix.
#1109
of 3,333 researchers
3
3
5.7
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C