dayea song
dayea song is a security researcher credited with 35 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #170 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2025, with 27 findings.
Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 26 of their findings (74%). Other recurring categories include Cross-Site Scripting, Missing Authorization. The average CVSS score across these disclosures is 4.9, peaking at 7.5. Severity breakdown: 0 critical and 1 high.
The most affected software includes Anber Elementor Addon (2), Popover Windows (2), Simple Theme Changer (2), across 32 distinct plugins, themes and core versions in total.
2 of the 35 disclosed issues have a vendor fix, while 33 remain unpatched.
#170
of 3,515 researchers
35
32
4.9
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C