Muhamad Visat

Muhamad Visat is a security researcher credited with 12 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #375 of 3,515 contributors. Their disclosures were published between 2020 and 2026. The most productive year was 2025, with 6 findings.

Their research concentrates on SQL Injection, which accounts for 7 of their findings (58%). Other recurring categories include Cross-Site Scripting, Authorization Bypass Through User-Controlled Key. The average CVSS score across these disclosures is 6.5, peaking at 8.8. Severity breakdown: 0 critical and 5 high.

The most affected software includes Login by Auth0 (5), 404 Solution (1), Advanced Google reCAPTCHA (1), across 8 distinct plugins, themes and core versions in total.

All 12 disclosed issues have since received a vendor fix. The most severe finding, "Login by Auth0 <= 3.11.3 - Cross-Site Request Forgery", scores 8.8 out of 10.

2020202120222023202420252026
Critical
High
Medium
Low
Global Rank

#375

of 3,515 researchers

Vulns

12

Critical0
High5
Medium7
Low0
Affected Assets

8

8plugins
Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

12 records
2026-01-05 15:12CVE-2025-13652
6.5
Medium
Muhamad VisatYes
2025-12-13 16:20CVE-2025-13126
7.5
High
Muhamad VisatYes
2025-12-12 15:01CVE-2025-14477
4.9
Medium
Muhamad VisatYes
2025-05-05 20:26CVE-2025-2011
7.5
High
Muhamad VisatYes
2025-04-16 00:00CVE-2026-15290
7.5
High
Muhamad VisatYes
2025-03-27 19:32CVE-2025-2074
5.3
Medium
Muhamad VisatYes
2025-03-06 22:02CVE-2025-1768
6.5
Medium
Muhamad VisatYes
2020-04-01 00:00CVE-2020-7948
4.3
Medium
Muhamad VisatYes
2020-04-01 00:00CVE-2020-6753
7.2
High
Muhamad VisatYes
2020-04-01 00:00CVE-2020-5391
8.8
High
Muhamad VisatYes
Showing 1–10 of 12 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C