haidv35

haidv35 is a security researcher credited with 18 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #279 of 3,515 contributors. Their disclosures were published between 2022 and 2025. The most productive year was 2024, with 16 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 8 of their findings (44%). Other recurring categories include PHP Remote File Inclusion, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 6.9, peaking at 9.8. Severity breakdown: 2 critical and 4 high.

The most affected software includes Ultimate Addons for WPBakery (5), WP STAGING (2), All-in-One WP Migration and Backup (1), across 13 distinct plugins, themes and core versions in total.

All 18 disclosed issues have since received a vendor fix. The most severe finding, "Shariff Wrapper <= 4.6.13 - Unauthenticated Local File Inclusion", scores 9.8 out of 10.