Denver Jackson
Denver Jackson is a security researcher credited with 152 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #53 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2025, with 83 findings.
Their research concentrates on Missing Authorization, which accounts for 63 of their findings (41%). Other recurring categories include Deserialization Of Untrusted Data, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 6.5, peaking at 9.8. Severity breakdown: 8 critical and 65 high.
The most affected software includes Atarim (3), Classified Listing (2), Follow My Blog Post - WordPress /… (2), across 145 distinct plugins, themes and core versions in total.
129 of the 152 disclosed issues have a vendor fix, while 23 remain unpatched. The most severe finding, "WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Arbitrary File Upload", scores 9.8 out of 10.
#53
of 3,515 researchers
152
145
6.5
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C