John P

John P is a security researcher credited with 7 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #623 of 3,515 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 7 of their findings (100%). The average CVSS score across these disclosures is 5.0, peaking at 5.3.

The most affected software includes Cream Magazine (1), Education Zone (1), News Magazine X (1), across 7 distinct plugins, themes and core versions in total.

5 of the 7 disclosed issues have a vendor fix, while 2 remain unpatched.

2026

Critical

High

Medium

Low

Global Rank

#623

of 3,515 researchers

Vulns

Critical0

High0

Medium7

Low0

Affected Assets

7themes

Avg CVSS

5.0

Average score of vulnerabilities

Researcher Submissions

7 records


2026-05-25 00:00	Newses <= 2.0.0.77 - Missing Authorization Newses <= 2.0.0.77	`CVE-2026-24586`	4.3 Medium	John P	Yes
2026-03-17 00:00	Education Zone <= 1.3.8 - Missing Authorization Education Zone <= 1.3.8	`CVE-2026-25009`	5.3 Medium	John P	Yes
2026-03-10 00:00	News Magazine X <= 1.2.50 - Missing Authorization News Magazine X <= 1.2.50	`CVE-2026-24382`	5.3 Medium	John P	Yes
2026-01-13 13:56	Travel Monster <= 1.3.3 - Missing Authorization Travel Monster <= 1.3.3	`CVE-2026-24607`	5.3 Medium	John P	Yes
2026-01-12 13:03	Orchid Store <= 1.5.15 - Missing Authorization Orchid Store <= 1.5.15	`CVE-2026-24612`	5.3 Medium	John P	No
2026-01-11 22:25	Cream Magazine <= 2.1.10 - Missing Authorization Cream Magazine <= 2.1.10	`CVE-2026-24615`	5.3 Medium	John P	No
2026-01-04 00:00	Oneline Lite <= 6.6 - Missing Authorization Oneline Lite <= 6.6	`CVE-2025-69344`	4.3 Medium	John P	Yes

Showing 1–7 of 7 reports