Muhamad Visat

Muhamad Visat is a security researcher credited with 14 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #387 of 3,899 contributors. Their disclosures were published between 2020 and 2026. The most productive year was 2025, with 6 findings.

Their research concentrates on SQL Injection, which accounts for 7 of their findings (50%). Other recurring categories include Cross-Site Scripting, Authorization Bypass Through User-Controlled Key. The average CVSS score across these disclosures is 6.4, peaking at 8.8. Severity breakdown: 0 critical and 5 high.

The most affected software includes Login by Auth0 (5), 404 Solution (1), Advanced Google reCAPTCHA (1), across 10 distinct plugins, themes and core versions in total.

All 14 disclosed issues have since received a vendor fix. The most severe finding, "Login by Auth0 <= 3.11.3 - Cross-Site Request Forgery", scores 8.8 out of 10.

2020202120222023202420252026
Critical
High
Medium
Low
Global Rank

#387

of 3,899 researchers

Vulns

14

Critical0
High5
Medium9
Low0
Affected Assets

10

9plugins1theme
Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

14 records
2026-10-09 19:26CVE-2026-97340
6.4
Medium
Muhamad VisatYes
2026-09-30 19:13CVE-2026-89047
6.1
Medium
Muhamad VisatYes
2026-01-05 15:12CVE-2025-13652
6.5
Medium
Muhamad VisatYes
2025-12-13 16:20CVE-2025-13126
7.5
High
Muhamad VisatYes
2025-12-12 15:01CVE-2025-14477
4.9
Medium
Muhamad VisatYes
2025-05-05 20:26CVE-2025-2011
7.5
High
Muhamad VisatYes
2025-04-16 00:00CVE-2026-15290
7.5
High
Muhamad VisatYes
2025-03-27 19:32CVE-2025-2074
5.3
Medium
Muhamad VisatYes
2025-03-06 22:02CVE-2025-1768
6.5
Medium
Muhamad VisatYes
2020-04-01 00:00CVE-2020-7948
4.3
Medium
Muhamad VisatYes
Showing 1–10 of 14 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C