Jeremy Felt

Jeremy Felt is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,969 of 3,917 contributors. The disclosure was published in 2026.

Their research concentrates on Improper Encoding Or Escaping Of Output, which accounts for 1 of their findings (50%). Other recurring categories include Improper Neutralization Of Input During Web Page Generation. The average CVSS score across these disclosures is 4.1, peaking at 4.4.

The most affected software includes WordPress 7.1 (2), across 1 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1969

of 3,917 researchers

Vulns

Critical0

High0

Medium1

Low1

Affected Assets

1core version

Avg CVSS

4.1

Average score of vulnerabilities

Researcher Submissions

2 records


2026-09-17 00:00	WordPress Core <= 7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom Header Image Data WordPress 7.1 6.6.7 – 7.1 · 6 branches	`N/A`	4.4 Medium	Jeremy Felt	Yes
2026-09-17 00:00	WordPress Core <= 7.1 - HTML API set_modifiable_text() Comment Boundary Break WordPress 7.1 6.7 – 7.1 · 5 branches	`N/A`	3.7 Low	Jeremy Felt	Yes

Showing 1–2 of 2 reports