Hiroho Shimada
Hiroho Shimada is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #426 of 3,515 contributors. Their disclosures were published between 2023 and 2025. The most productive year was 2025, with 4 findings.
Their research concentrates on Path Traversal, which accounts for 5 of their findings (50%). Other recurring categories include PHP Remote File Inclusion, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 8.8, peaking at 9.8. Severity breakdown: 6 critical and 3 high.
The most affected software includes MasterStudy LMS WordPress Plugin (4), Backup Migration (2), HUSKY (1), across 6 distinct plugins, themes and core versions in total.
9 of the 10 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion", scores 9.8 out of 10.
#426
of 3,515 researchers
10
6
8.8
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C