Jakub Herman
Jakub Herman is a security researcher credited with 161 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #48 of 3,899 contributors. The disclosure was published in 2026.
Their research concentrates on Missing Authorization, which accounts for 40 of their findings (25%). Other recurring categories include Code Injection, Cross-Site Scripting. The average CVSS score across these disclosures is 6.3, peaking at 9.8. Severity breakdown: 10 critical and 49 high.
The most affected software includes Forminator Forms (4), Kirki (4), Unlimited Elements for Elementor (4), across 141 distinct plugins, themes and core versions in total.
151 of the 161 disclosed issues have a vendor fix, while 10 remain unpatched. The most severe finding, "Ultimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload", scores 9.8 out of 10.
#48
of 3,899 researchers
165
147
6.3
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C