Mustafa

Mustafa is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,125 of 3,333 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 1 of their findings (33%). Other recurring categories include Cross-Site Scripting, PHP Remote File Inclusion. The average CVSS score across these disclosures is 5.4, peaking at 7.5. Severity breakdown: 0 critical and 1 high.

The most affected software includes Motors (1), reCaptcha by WebDesignBy (1), WP Maps (1), across 3 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix.

2026
Critical
High
Medium
Low

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C