Daniel Ruf
Daniel Ruf is a security researcher credited with 158 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #50 of 3,515 contributors. Their disclosures were published between 2019 and 2025. The most productive year was 2022, with 102 findings.
Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 109 of their findings (69%). Other recurring categories include Cross-Site Scripting, Missing Authorization. The average CVSS score across these disclosures is 7.1, peaking at 9.8. Severity breakdown: 17 critical and 55 high.
The most affected software includes HTML2WP (3), All-In-One Security (AIOS) (2), Flexi Quote Rotator (2), across 149 distinct plugins, themes and core versions in total.
55 of the 158 disclosed issues have a vendor fix, while 103 remain unpatched. The most severe finding, "Amazon Affiliate <= 3.12.2 - Reflected File Download", scores 9.8 out of 10.
#50
of 3,515 researchers
158
149
7.1
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C