Mustafa Ahmed
Mustafa Ahmed is a security researcher credited with 20 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #291 of 3,823 contributors. The disclosure was published in 2026.
Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 7 of their findings (35%). Other recurring categories include Cross-Site Scripting, Missing Authorization. The average CVSS score across these disclosures is 4.7, peaking at 6.4.
The most affected software includes WPBot (2), Academy LMS (1), Advanced Excerpt (1), across 19 distinct plugins, themes and core versions in total.
19 of the 20 disclosed issues have a vendor fix, while 1 remain unpatched.
#291
of 3,823 researchers
20
19
4.7
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C