n4ur15

n4ur15 is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,189 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 2 findings.

Their research concentrates on Path Traversal, which accounts for 2 of their findings (67%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 5.5, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes WP-DownloadManager (3), across 1 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix.

20252026

Critical

High

Medium

Low

Global Rank

#1189

of 3,515 researchers

Vulns

Critical0

High1

Medium1

Low1

Affected Assets

1plugin

Avg CVSS

5.5

Average score of vulnerabilities

Researcher Submissions

3 records


2026-02-17 21:55	WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'file' Parameter WP-DownloadManager <= 1.69	`CVE-2026-2426`	6.5 Medium	n4ur15	Yes
2026-02-17 19:12	WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'download_path' Parameter WP-DownloadManager <= 1.69	`CVE-2026-2419`	2.7 Low	n4ur15	Yes
2025-09-25 00:00	WP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload WP-DownloadManager <= 1.68.11	`CVE-2025-10747`	7.2 High	n4ur15	Yes

Showing 1–3 of 3 reports