Or Benit

Or Benit is a security researcher credited with 7 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #686 of 3,878 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 4 of their findings (57%). Other recurring categories include Cross-Site Scripting, Open Redirect. The average CVSS score across these disclosures is 5.1, peaking at 6.5.

The most affected software includes Download Manager (1), Elementor Website Builder (1), Enable Media Replace (1), across 7 distinct plugins, themes and core versions in total.

All 7 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#686

of 3,878 researchers

Vulns

Critical0

High0

Medium7

Low0

Affected Assets

7plugins

Avg CVSS

5.1

Average score of vulnerabilities

Researcher Submissions

7 records


2026-10-14 18:17	Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameters Elementor Website Builder <= 4.2.3	`CVE-2026-11905`	4.3 Medium	Or Benit	Yes
2026-07-31 19:29	GenerateBlocks <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes GenerateBlocks <= 2.3.0	`CVE-2026-13458`	6.4 Medium	Or Benit	Yes
2026-05-27 19:36	Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute Photo Gallery by 10Web <= 1.8.40	`CVE-2026-7048`	6.5 Medium	Or Benit	Yes
2026-04-09 12:00	Download Manager <= 3.3.51 - Missing Authorization to Authenticated (Contributor+) Media File Protection Removal Download Manager <= 3.3.51	`CVE-2026-4057`	4.3 Medium	Or Benit	Yes
2026-03-18 00:00	Hide My WP Ghost < 7.0.00 - Unauthenticated Open Redirect Hide My WP Ghost < 7.0.00	`CVE-2026-39484`	4.7 Medium	Or Benit	Yes
2026-03-15 00:00	Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) <= 9.5.7 - Missing Authorization Really Simple Security <= 9.5.7	`CVE-2026-32461`	4.3 Medium	Or Benit	Yes
2026-03-03 18:17	Enable Media Replace <= 4.1.7 - Improper Authorization to Authenticated (Author+) Arbitrary Attachment Change via Background Replace Enable Media Replace <= 4.1.7	`CVE-2026-2732`	5.4 Medium	Or Benit	Yes

Showing 1–7 of 7 reports