Muhammad Sharief (Md Sharief)
Muhammad Sharief (Md Sharief) is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #875 of 3,333 contributors. The disclosure was published in 2026.
Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 1 of their findings (25%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Missing Authorization. The average CVSS score across these disclosures is 5.9, peaking at 8.8. Severity breakdown: 0 critical and 1 high.
The most affected software includes WpStream (2), Revive.so (1), RSVP and Event Management (1), across 3 distinct plugins, themes and core versions in total.
All 4 disclosed issues have since received a vendor fix. The most severe finding, "WpStream – Live Streaming, Video on Demand, Pay Per View < 4.11.2 - Authenticated (Subscriber+) Arbitrary File Upload", scores 8.8 out of 10.
#875
of 3,333 researchers
4
3
5.9
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C