moonge

moonge is a security researcher credited with 20 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #278 of 3,866 contributors. The disclosure was published in 2026.

Their research concentrates on Improper Privilege Management, which accounts for 7 of their findings (35%). Other recurring categories include Improper Authentication, Unverified Password Change. The average CVSS score across these disclosures is 8.3, peaking at 9.8. Severity breakdown: 9 critical and 7 high.

The most affected software includes 6Storage Rentals (1), AutoNetTV Relay (1), Bricksforge (1), across 20 distinct plugins, themes and core versions in total.

13 of the 20 disclosed issues have a vendor fix, while 7 remain unpatched. The most severe finding, "Frontegg SAML SSO <= 1.0.1 - Authentication Bypass to Admin", scores 9.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#278

of 3,866 researchers

Vulns

20

Critical9
High7
Medium4
Low0
Affected Assets

20

19plugins1theme
Avg CVSS

8.3

Average score of vulnerabilities

Researcher Submissions

20 records
2026-09-24 18:42CVE-2026-89426
8.8
High
moongeYes
2026-09-10 00:00CVE-2026-75800
9.8
Critical
moongeNo
2026-09-09 14:49CVE-2026-14873
8.0
High
AfanNo
2026-08-31 00:00CVE-2026-16259
7.3
High
moongeNo
2026-08-21 00:00CVE-2026-18031
7.3
High
moongeNo
2026-08-20 00:00CVE-2026-73402
6.4
Medium
moongeYes
2026-08-14 14:02CVE-2026-15341
9.8
Critical
AfanNo
2026-08-14 14:02CVE-2026-15303
9.8
Critical
AfanYes
2026-08-06 00:00CVE-2026-13600
5.3
Medium
moongeYes
2026-08-06 00:00CVE-2026-12586
9.8
Critical
moongeNo
Showing 1–10 of 20 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C