Jonas Benjamin Friedli

Jonas Benjamin Friedli is a security researcher credited with 130 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #58 of 3,515 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2025, with 118 findings.

Their research concentrates on Missing Authorization, which accounts for 24 of their findings (18%). Other recurring categories include Cross-Site Scripting, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 5.7, peaking at 9.8. Severity breakdown: 5 critical and 24 high.

The most affected software includes atec Debug (3), OAuth Single Sign On (3), All in One Time Clock Lite (2), across 111 distinct plugins, themes and core versions in total.

98 of the 130 disclosed issues have a vendor fix, while 32 remain unpatched. The most severe finding, "Export WP Page to Static HTML & PDF <= 4.3.4 - Unauthenticated Cookie Exposure via Log File", scores 9.8 out of 10.

202420252026
Critical
High
Medium
Low
Global Rank

#58

of 3,515 researchers

Vulns

130

Critical5
High24
Medium96
Low5
Affected Assets

111

110plugins1theme
Avg CVSS

5.7

Average score of vulnerabilities

Researcher Submissions

130 records
2026-07-10 16:42CVE-2025-6784
8.8
High
Jonas Benjamin FriedliYes
2026-02-17 16:37CVE-2025-12122
6.4
Medium
Jonas Benjamin FriedliYes
2026-02-17 00:00CVE-2025-8781
4.9
Medium
Jonas Benjamin FriedliYes
2026-02-13 18:16CVE-2025-6792
5.3
Medium
Jonas Benjamin FriedliNo
2026-02-05 18:30CVE-2025-10753
5.3
Medium
Jonas Benjamin FriedliYes
2026-01-16 19:16CVE-2025-12129
5.3
Medium
Jonas Benjamin FriedliYes
2025-12-12 15:39CVE-2025-11693
9.8
Critical
Jonas Benjamin FriedliYes
2025-12-12 15:29CVE-2025-11164
4.3
Medium
Jonas Benjamin FriedliYes
2025-12-12 15:26CVE-2025-11970
4.4
Medium
Jonas Benjamin FriedliYes
2025-12-04 19:20CVE-2025-12130
4.3
Medium
Jonas Benjamin FriedliYes
Showing 1–10 of 130 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C