lhking
lhking is a security researcher credited with 16 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #325 of 3,823 contributors. The disclosure was published in 2026.
Their research concentrates on Cross-Site Scripting, which accounts for 8 of their findings (50%). Other recurring categories include Path Traversal, Improper Privilege Management. The average CVSS score across these disclosures is 7.6, peaking at 9.8. Severity breakdown: 1 critical and 12 high.
The most affected software includes Appointment Booking Plugin (1), Aurora Heatmap (1), Autoptimize (1), across 16 distinct plugins, themes and core versions in total.
All 16 disclosed issues have since received a vendor fix. The most severe finding, "SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion", scores 9.8 out of 10.
#325
of 3,823 researchers
16
16
7.6
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C