Erwan LR
Erwan LR is a security researcher credited with 197 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #43 of 3,899 contributors. Their disclosures were published between 2020 and 2026. The most productive year was 2023, with 93 findings.
Their research concentrates on Improper Neutralization Of Input During Web Page Generation, which accounts for 81 of their findings (41%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery. The average CVSS score across these disclosures is 5.9, peaking at 9.8. Severity breakdown: 8 critical and 23 high.
The most affected software includes KiviCare (5), WPBot (5), EventON (4), across 148 distinct plugins, themes and core versions in total.
174 of the 197 disclosed issues have a vendor fix, while 23 remain unpatched. The most severe finding, "Streamit <= 4.5.0 - Unauthenticated Remote Code Execution", scores 9.8 out of 10.
#43
of 3,899 researchers
197
165
5.9
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C