jsonc

jsonc is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #811 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2025, with 3 findings.

Their research concentrates on Missing Authorization, which accounts for 2 of their findings (40%). Other recurring categories include Client-Side Enforcement Of Server-Side Security, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 4.7, peaking at 5.3.

The most affected software includes Context Blog (1), Spin Wheel (1), TopBar (1), across 5 distinct plugins, themes and core versions in total.

3 of the 5 disclosed issues have a vendor fix, while 2 remain unpatched.

20252026

Critical

High

Medium

Low

Global Rank

#811

of 3,515 researchers

Vulns

Critical0

High0

Medium5

Low0

Affected Assets

4plugins1theme

Avg CVSS

4.7

Average score of vulnerabilities

Researcher Submissions

5 records


2026-02-17 16:33	Context Blog <= 1.2.5 - Unauthenticated Private Post Disclosure Context Blog <= 1.2.5	`CVE-2025-12074`	5.3 Medium	jsonc	Yes
2026-01-16 18:09	Spin Wheel <= 2.1.0 - Unauthenticated Client-Side Prize Manipulation via 'prize_index' Parameter Spin Wheel <= 2.1.0	`CVE-2026-0808`	5.3 Medium	jsonc	Yes
2025-12-12 16:08	Userback <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Plugin's Configuration Exposure Userback <= 1.0.15	`CVE-2025-14540`	4.3 Medium	jsonc	Yes
2025-12-11 14:28	URL Media Uploader <= 1.0.1 - Missing Authorization to Authenticated (Contributor+) Safe File Upload URL Media Uploader <= 1.0.1	`CVE-2025-14045`	4.3 Medium	jsonc	No
2025-10-14 19:36	TopBar <= 1.0.0 - Cross-Site Request Forgery to Settings Update TopBar <= 1.0.0	`CVE-2025-10300`	4.3 Medium	jsonc	No

Showing 1–5 of 5 reports