Mustafa Ahmed

Mustafa Ahmed is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #479 of 3,333 contributors. The disclosure was published in 2026.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 3 of their findings (33%). Other recurring categories include Cross-Site Scripting, SQL Injection. The average CVSS score across these disclosures is 4.9, peaking at 6.4.

The most affected software includes WPBot (2), Academy LMS (1), Brizy (1), across 8 distinct plugins, themes and core versions in total.

All 9 disclosed issues have since received a vendor fix.

2026
Critical
High
Medium
Low
Global Rank

#479

of 3,333 researchers

Vulns

9

Critical0
High0
Medium9
Low0
Affected Assets

8

8plugins
Avg CVSS

4.9

Average score of vulnerabilities

Researcher Submissions

9 records
2026-08-01 00:00CVE-2026-14195
4.3
Medium
Mustafa AhmedYes
2026-08-01 00:00CVE-2026-14197
4.3
Medium
Mustafa AhmedYes
2026-07-30 00:00CVE-2026-14188
4.3
Medium
Mustafa AhmedYes
2026-07-30 00:00CVE-2026-14207
6.4
Medium
Mustafa AhmedYes
2026-07-06 00:00CVE-2026-14189
4.9
Medium
Mustafa AhmedYes
2026-07-06 00:00CVE-2026-14190
6.1
Medium
Mustafa AhmedYes
2026-06-30 00:00CVE-2026-14185
4.3
Medium
Mustafa AhmedYes
2026-06-30 00:00CVE-2026-14184
4.3
Medium
Mustafa AhmedYes
2026-06-25 00:00CVE-2026-7842
4.9
Medium
Mustafa AhmedYes
Showing 1–9 of 9 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C