HLog
HLog is a security researcher credited with 13 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #365 of 3,515 contributors. The disclosure was published in 2025.
Their research concentrates on Missing Authorization, which accounts for 6 of their findings (46%). Other recurring categories include Cross-Site Scripting, Code Injection. The average CVSS score across these disclosures is 5.8, peaking at 9.8. Severity breakdown: 1 critical and 2 high.
The most affected software includes FastBook (2), KI Live Video Conferences (2), Activity Link Preview For BuddyPress (1), across 11 distinct plugins, themes and core versions in total.
5 of the 13 disclosed issues have a vendor fix, while 8 remain unpatched. The most severe finding, "One-Login <= 1.4 - Unauthenticated Privilege Esclation", scores 9.8 out of 10.
#365
of 3,515 researchers
13
11
5.8
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C