NAWardRox

NAWardRox is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #410 of 3,515 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2025, with 9 findings.

Their research concentrates on SQL Injection, which accounts for 7 of their findings (64%). Other recurring categories include Missing Authorization, Authentication Bypass Using An Alternate Path Or Channel. The average CVSS score across these disclosures is 6.2, peaking at 9.8. Severity breakdown: 1 critical and 3 high.

The most affected software includes Salon Booking System (2), Ai Auto Tool Content Writing Assistant… (1), Church Admin (1), across 10 distinct plugins, themes and core versions in total.

6 of the 11 disclosed issues have a vendor fix, while 5 remain unpatched. The most severe finding, "Workreap Core <= 3.4.0 - Authentication Bypass", scores 9.8 out of 10.

202420252026
Critical
High
Medium
Low
Global Rank

#410

of 3,515 researchers

Vulns

11

Critical1
High3
Medium7
Low0
Affected Assets

10

10plugins
Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

11 records
2026-01-15 00:00CVE-2025-69101
9.8
Critical
NAWardRoxNo
2025-05-16 00:00CVE-2025-47567
4.9
Medium
NAWardRoxNo
2025-05-15 00:00CVE-2025-47583
4.3
Medium
NAWardRoxYes
2025-04-09 00:00CVE-2025-31565
7.5
High
NAWardRoxNo
2025-04-09 00:00CVE-2025-32618
6.5
Medium
NAWardRoxNo
2025-04-04 00:00CVE-2025-32220
4.3
Medium
NAWardRoxNo
2025-04-01 00:00CVE-2025-31826
4.3
Medium
NAWardRoxYes
2025-03-31 00:00CVE-2025-31564
6.5
Medium
NAWardRoxYes
2025-03-13 00:00CVE-2025-26941
7.5
High
NAWardRoxYes
2025-02-23 00:00CVE-2025-26943
7.5
High
NAWardRoxYes
Showing 1–10 of 11 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C