Maktoum (bRpsd)

Maktoum (bRpsd) is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #945 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 3 findings.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 1 of their findings (25%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Improper Authentication. The average CVSS score across these disclosures is 5.4, peaking at 6.5.

The most affected software includes RegistrationMagic (2), Timetable and Event Schedule… (1), Welcart e-Commerce (1), across 3 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

20252026

Critical

High

Medium

Low

Global Rank

#945

of 3,515 researchers

Vulns

Critical0

High0

Medium4

Low0

Affected Assets

3plugins

Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

4 records


2026-08-19 00:00	Welcart e-Commerce < 2.12.1 - Unauthenticated Session Fixation Welcart e-Commerce < 2.12.1	`CVE-2025-15671`	6.5 Medium	Maktoum (bRpsd)	Yes
2026-02-16 00:00	RegistrationMagic < 6.0.7.2 - Missing Authorization RegistrationMagic < 6.0.7.2	`CVE-2026-0929`	4.3 Medium	Maktoum (bRpsd)	Yes
2026-01-23 00:00	RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 - Authenticated (Subscriber+) Information Exposure RegistrationMagic <= 6.0.7.1	`CVE-2025-15520`	5.3 Medium	Maktoum (bRpsd)	Yes
2025-11-12 00:00	Timetable and Event Schedule by MotoPress <= 2.4.15 - Insecure Direct Object Reference to Authenticated (Contributor+) Event Disclosure Timetable and Event Schedule… <= 2.4.15	`CVE-2025-12954`	5.3 Medium	Maktoum (bRpsd)	Yes

Showing 1–4 of 4 reports