Hassan Khan Yusufzai - Splint3r7
Hassan Khan Yusufzai - Splint3r7 is a security researcher credited with 111 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #66 of 3,515 contributors. Their disclosures were published between 2022 and 2025. The most productive year was 2025, with 92 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 103 of their findings (93%). Other recurring categories include PHP Remote File Inclusion, Path Traversal. The average CVSS score across these disclosures is 6.2, peaking at 9.8. Severity breakdown: 2 critical and 2 high.
The most affected software includes Admin Word Count Column (2), Spiritual Gifts Survey (and optional… (2), WoWPth (2), across 108 distinct plugins, themes and core versions in total.
19 of the 111 disclosed issues have a vendor fix, while 92 remain unpatched. The most severe finding, "Videos sync PDF <= 1.7.4 - Unauthenticated Local File Inclusion", scores 9.8 out of 10.
#66
of 3,515 researchers
111
108
6.2
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C