Gai Tanaka (63n0)

Gai Tanaka (63n0) is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #437 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on Cross-Site Scripting, which accounts for 6 of their findings (60%). Other recurring categories include Cross-Site Request Forgery (CSRF), Deserialization Of Untrusted Data. The average CVSS score across these disclosures is 7.0, peaking at 9.1. Severity breakdown: 1 critical and 3 high.

The most affected software includes Eventin (1), Groundhogg (1), Latest Post Shortcode (1), across 10 distinct plugins, themes and core versions in total.

All 10 disclosed issues have since received a vendor fix. The most severe finding, "Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function", scores 9.1 out of 10.

2025
Critical
High
Medium
Low
Global Rank

#437

of 3,515 researchers

Vulns

10

Critical1
High3
Medium6
Low0
Affected Assets

10

10plugins
Avg CVSS

7.0

Average score of vulnerabilities

Researcher Submissions

10 records
2025-09-03 00:00CVE-2025-58609
6.4
Medium
Gai Tanaka (63n0)Yes
2025-08-27 00:00CVE-2025-7812
8.8
High
Gai Tanaka (63n0)Yes
2025-08-22 17:41CVE-2025-7813
7.2
High
Gai Tanaka (63n0)Yes
2025-07-28 00:00CVE-2025-7810
5.4
Medium
Gai Tanaka (63n0)Yes
2025-07-28 00:00CVE-2025-7809
6.4
Medium
Gai Tanaka (63n0)Yes
2025-07-28 00:00CVE-2025-7811
6.4
Medium
Gai Tanaka (63n0)Yes
2025-07-16 00:00CVE-2025-54016
6.4
Medium
Gai Tanaka (63n0)Yes
2025-07-16 00:00CVE-2025-54013
5.5
Medium
Gai Tanaka (63n0)Yes
2025-07-04 00:00CVE-2025-48300
8.8
High
Gai Tanaka (63n0)Yes
2025-05-13 14:20CVE-2025-3623
9.1
Critical
mikemyersYes
Showing 1–10 of 10 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C