NumeX

NumeX is a security researcher credited with 51 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #117 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 29 findings.

Their research concentrates on Missing Authorization, which accounts for 35 of their findings (69%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Cross-Site Scripting. The average CVSS score across these disclosures is 5.8, peaking at 9.8. Severity breakdown: 2 critical and 9 high.

The most affected software includes Accordions (1), Activity Log for WordPress (1), AI Content Writing Assistant (1), across 51 distinct plugins, themes and core versions in total.

37 of the 51 disclosed issues have a vendor fix, while 14 remain unpatched. The most severe finding, "LottieFiles <= 3.0.0 - Missing Authorization", scores 9.8 out of 10.

20252026
Critical
High
Medium
Low
Global Rank

#117

of 3,515 researchers

Vulns

51

Critical2
High9
Medium40
Low0
Affected Assets

51

51plugins
Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

51 records
2026-05-26 15:59CVE-2025-14481
4.3
Medium
NumeXYes
2026-05-07 00:00CVE-2025-68049
4.3
Medium
NumeXYes
2026-03-20 00:00CVE-2026-32523
8.8
High
NumeXYes
2026-03-18 00:00CVE-2026-25447
8.8
High
NumeXNo
2026-03-17 00:00CVE-2026-24987
4.3
Medium
NumeXYes
2026-03-12 00:00CVE-2026-27067
7.2
High
NumeXNo
2026-03-10 00:00CVE-2026-22448
9.1
Critical
NumeXYes
2026-02-23 00:00CVE-2026-32410
5.3
Medium
NumeXYes
2026-02-18 00:00CVE-2026-23545
5.3
Medium
NumeXYes
2026-02-16 00:00CVE-2026-39657
5.3
Medium
NumeXNo
Showing 1–10 of 51 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C