MAJidox

MAJidox is a security researcher credited with 20 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #239 of 3,333 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 20 of their findings (100%). The average CVSS score across these disclosures is 6.4, peaking at 6.4.

The most affected software includes Credits Shortcode (1), Cryptocurrency Prijsvergelijking Widget (1), Dideo (1), across 20 distinct plugins, themes and core versions in total.

None of the 20 disclosed issues have a published fix yet.

2026

Critical

High

Medium

Low

Global Rank

#239

of 3,333 researchers

Vulns

Critical0

High0

Medium20

Low0

Affected Assets

20plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

20 records


2026-06-08 15:05	Extra Settings for RocketChat <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Extra Settings for RocketChat <= 0.1	`CVE-2026-8841`	6.4 Medium	MAJidox	No
2026-05-26 17:22	Dideo <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Dideo <= 1.0	`CVE-2026-8847`	6.4 Medium	MAJidox	No
2026-05-26 17:22	Tuxquote <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Tuxquote <= 1.3	`CVE-2026-8846`	6.4 Medium	MAJidox	No
2026-05-26 17:22	Islamic Database <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Islamic Database <= 1.0	`CVE-2026-8845`	6.4 Medium	MAJidox	No
2026-05-26 17:22	Responsive Check <= 0.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Responsive Check <= 0.0.3	`CVE-2026-8844`	6.4 Medium	MAJidox	No
2026-05-26 17:21	Google+ Link Name <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Google+ Link Name <= 1.0	`CVE-2026-8842`	6.4 Medium	MAJidox	No
2026-05-26 17:21	Endless Scroll <= 1.0.0 - [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')] Endless Scroll <= 1.0.0	`CVE-2026-8703`	6.4 Medium	MAJidox	No
2026-05-26 17:21	GBI To Print <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'div' Shortcode Attribute GBI To Print <= 1.0	`CVE-2026-8702`	6.4 Medium	MAJidox	No
2026-05-26 17:21	GNTT Post Title Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes GNTT Post Title Ticker <= 1.0	`CVE-2026-8701`	6.4 Medium	MAJidox	No
2026-05-26 17:21	Cryptocurrency Prijsvergelijking Widget <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute Cryptocurrency Prijsvergelijking Widget <= 1.0	`CVE-2026-8698`	6.4 Medium	MAJidox	No

Showing 1–10 of 20 reports