elba.code

elba.code is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,933 of 3,943 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 2 of their findings (100%). The average CVSS score across these disclosures is 4.8, peaking at 5.3.

The most affected software includes User Frontend (1), User Registration & Membership (1), across 2 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1933

of 3,943 researchers

Vulns

Critical0

High0

Medium2

Low0

Affected Assets

2plugins

Avg CVSS

4.8

Average score of vulnerabilities

Researcher Submissions

2 records


2026-10-29 14:28	User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.3.0 - Missing Authorization User Registration & Membership <= 5.3.0	`CVE-2026-25450`	5.3 Medium	elba.code	Yes
2026-10-29 14:15	User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.13 - Missing Authorization User Frontend <= 4.3.13	`CVE-2026-52708`	4.3 Medium	elba.code	Yes

Showing 1–2 of 2 reports