Omar Elshopky (3l5h0pky)

Omar Elshopky (3l5h0pky) is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,006 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (75%). Other recurring categories include Path Traversal. The average CVSS score across these disclosures is 5.9, peaking at 6.4.

The most affected software includes Filter Everything — WordPress… (1), LWS Optimize (1), Post and Page Builder by BoldGrid (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1006

of 3,823 researchers

Vulns

Critical0

High0

Medium4

Low0

Affected Assets

4plugins

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

4 records


2026-10-14 16:36	Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute Post and Page Builder by BoldGrid <= 1.27.13	`CVE-2026-78001`	6.4 Medium	Omar Elshopky (3l5h0pky)	Yes
2026-10-09 17:04	Table Field Add-on for ACF and SCF <= 1.3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table Cell Content Table Field Add-on for ACF and SCF <= 1.3.35	`CVE-2026-78068`	6.4 Medium	Omar Elshopky (3l5h0pky)	Yes
2026-10-09 15:41	Filter Everything — WordPress & WooCommerce Filters <= 1.9.6 - Reflected Cross-Site Scripting via Elementor Posts Widget Pagination URL Filter Everything — WordPress… <= 1.9.6	`CVE-2026-87869`	6.1 Medium	Omar Elshopky (3l5h0pky)	Yes
2026-06-12 14:06	WS Optimize – All-in-One Speed Booster & Cache Tools <= 3.3.19 - Authenticated (Editor+) Arbitrary File Read LWS Optimize <= 3.3.19	`CVE-2026-12089`	4.9 Medium	Omar Elshopky (3l5h0pky)	Yes

Showing 1–4 of 4 reports