Jesse McNeil

Jesse McNeil is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #872 of 3,878 contributors. Their disclosures were published between 2023 and 2026. The most productive year was 2023, with 4 findings.

Their research concentrates on Missing Authorization, which accounts for 2 of their findings (40%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting. The average CVSS score across these disclosures is 5.5, peaking at 9.8. Severity breakdown: 1 critical and 0 high.

The most affected software includes wpForo Forum (4), WordPress 7.1 (1), across 2 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix. The most severe finding, "wpForo Forum <= 2.2.3 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.

2023202420252026

Critical

High

Medium

Low

Global Rank

#872

of 3,878 researchers

Vulns

Critical1

High0

Medium3

Low1

Affected Assets

1plugin1core version

Avg CVSS

5.5

Average score of vulnerabilities

Researcher Submissions

5 records


2026-09-17 00:00	WordPress Core <= 7.1 - Authenticated (Administrator+) Missing Authorization to Network Plugin Activation (Multisite) WordPress 7.1 6.6.7 – 7.1 · 6 branches	`N/A`	2.7 Low	Jesse McNeil	Yes
2023-11-20 00:00	wpForo Forum <= 2.2.3 - Unauthenticated Privilege Escalation wpForo Forum <= 2.2.3	`CVE-2023-47868`	9.8 Critical	Jesse McNeil	Yes
2023-11-20 00:00	wpForo Forum <= 2.2.8 - Cross-Site Request Forgery via logout() wpForo Forum <= 2.2.8	`CVE-2023-47870`	4.3 Medium	Jesse McNeil	Yes
2023-11-20 00:00	wpForo Forum <= 2.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting wpForo Forum <= 2.2.3	`CVE-2023-47872`	6.4 Medium	Jesse McNeil	Yes
2023-11-20 00:00	wpForo Forum <= 2.2.5 - Missing Authorization wpForo Forum <= 2.2.5	`CVE-2023-47869`	4.3 Medium	Jesse McNeil	Yes

Showing 1–5 of 5 reports