hunter85

hunter85 is a security researcher credited with 13 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #366 of 3,515 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2024, with 7 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 8 of their findings (62%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization. The average CVSS score across these disclosures is 5.6, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes CodeBard Help Desk (3), CubeWP Forms (2), Hive Support (2), across 9 distinct plugins, themes and core versions in total.

8 of the 13 disclosed issues have a vendor fix, while 5 remain unpatched.

20242025

Critical

High

Medium

Low

Global Rank

#366

of 3,515 researchers

Vulns

Critical0

High1

Medium12

Low0

Affected Assets

9plugins

Avg CVSS

5.6

Average score of vulnerabilities

Researcher Submissions

13 records


2025-04-08 00:00	Hive Support <= 1.2.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting Hive Support <= 1.2.11	`CVE-2025-32214`	6.4 Medium	hunter85	Yes
2025-03-31 00:00	WPCargo Track & Trace <= 8.0.1 - Authenticated (Contributor+) Insecure Direct Object Reference WPCargo Track & Trace <= 8.0.1	`CVE-2025-31609`	4.3 Medium	hunter85	No
2025-02-14 00:00	CodeBard Help Desk <= 1.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting CodeBard Help Desk <= 1.1.2	`CVE-2025-22757`	6.4 Medium	hunter85	No
2025-02-03 00:00	Smartarget – Get 40% more sales, improve user engagement with 25+ free apps. <= 1.5.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting Smartarget <= 1.5.2	`CVE-2025-22650`	6.4 Medium	hunter85	Yes
2025-01-14 00:00	CodeBard Help Desk <= 1.1.2 - Reflected Cross-Site Scripting CodeBard Help Desk <= 1.1.2	`CVE-2025-22760`	6.1 Medium	hunter85	No
2025-01-06 00:00	CubeWP Forms – All-in-One Form Builder <= 1.1.5 - Missing Authorization CubeWP Forms <= 1.1.5	`CVE-2024-51651`	5.3 Medium	hunter85	No
2024-12-19 00:00	CodeBard Help Desk <= 1.1.1 - Cross-Site Request Forgery CodeBard Help Desk <= 1.1.1	`CVE-2024-56222`	4.3 Medium	hunter85	Yes
2024-12-11 00:00	Hive Support – WordPress Help Desk <= 1.1.2 - Cross-Site Request Forgery Hive Support <= 1.1.2	`CVE-2024-54321`	4.3 Medium	hunter85	Yes
2024-12-11 00:00	WordPress HelpDesk & Support Ticket System Plugin – Octrace Support <= 1.2.7 - Reflected Cross-Site Scripting WordPress HelpDesk & Support Ticket… <= 1.2.7	`CVE-2024-54274`	6.1 Medium	hunter85	No
2024-12-11 00:00	ICDSoft Reseller Store <= 2.4.5 - Reflected Cross-Site Scripting ICDSoft Reseller Store <= 2.4.5	`CVE-2024-54320`	6.1 Medium	hunter85	Yes

Showing 1–10 of 13 reports