Naoki Kawahigashi

Naoki Kawahigashi is a security researcher credited with 36 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #138 of 3,866 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 12 of their findings (33%). Other recurring categories include SQL Injection, Authentication Bypass Using An Alternate Path Or Channel. The average CVSS score across these disclosures is 6.6, peaking at 9.8. Severity breakdown: 6 critical and 9 high.

The most affected software includes Social Web Suite (2), Blacklist Manager (1), Classified Listing (1), across 35 distinct plugins, themes and core versions in total.

16 of the 36 disclosed issues have a vendor fix, while 20 remain unpatched. The most severe finding, "Mindstien Quick Login <= 1.0 - Unauthenticated Privilege Escalation via Account Takeover", scores 9.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#138

of 3,866 researchers

Vulns

47

Critical6
High12
Medium29
Low0
Affected Assets

46

46plugins
Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

36 records
2026-10-14 00:00CVE-2026-103307
7.5
High
Naoki KawahigashiYes
2026-10-14 00:00CVE-2026-106646
4.3
Medium
Naoki KawahigashiYes
2026-10-09 00:00CVE-2026-88930
7.5
High
Naoki KawahigashiNo
2026-10-09 00:00CVE-2026-89297
7.5
High
Naoki KawahigashiNo
2026-10-09 00:00CVE-2026-88827
4.3
Medium
Naoki KawahigashiNo
2026-10-09 00:00CVE-2026-84734
9.8
Critical
Naoki KawahigashiNo
2026-10-09 00:00CVE-2026-89302
7.5
High
Naoki KawahigashiNo
2026-10-09 00:00CVE-2026-106029
5.3
Medium
Naoki KawahigashiNo
2026-10-09 00:00CVE-2026-93550
8.8
High
Naoki KawahigashiNo
2026-10-09 00:00CVE-2026-89283
5.3
Medium
Naoki KawahigashiNo
Showing 1–10 of 36 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C