Jon Surrell

Jon Surrell is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,326 of 3,908 contributors. The disclosure was published in 2026.

Their research concentrates on Improper Neutralization Of Input During Web Page Generation, which accounts for 2 of their findings (67%). Other recurring categories include Uncaught Exception. The average CVSS score across these disclosures is 5.4, peaking at 6.4.

The most affected software includes WordPress 7.1 (3), across 1 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1326

of 3,908 researchers

Vulns

Critical0

High0

Medium2

Low1

Affected Assets

1core version

Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

3 records


2026-10-29 00:00	WordPress Core 6.6.0 - 7.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Interactivity API Event Handler Bindings WordPress 7.1 6.6.0 – 7.1.3 · 6 branches	`N/A`	6.4 Medium	Jon Surrell	Yes
2026-10-29 00:00	WordPress Core 6.4.0 - 7.1.3 - Authenticated (Contributor+) Stored Denial of Service via Malformed Interactivity API Bindings WordPress 7.1 6.4.0 – 7.1.3 · 8 branches	`N/A`	3.5 Low	Jon Surrell	Yes
2026-10-29 00:00	WordPress Core 6.6.0 - 7.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Unsafe Interactivity API Binding Properties WordPress 7.1 6.6.0 – 7.1.3 · 6 branches	`N/A`	6.4 Medium	Alex Concha	Yes

Showing 1–3 of 3 reports