Pablo González Pérez

Pablo González Pérez is a security researcher credited with 33 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #188 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 13 of their findings (39%). Other recurring categories include Missing Authorization, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 6.5, peaking at 9.8. Severity breakdown: 1 critical and 16 high.

The most affected software includes Adwised Web Push Notification (2), To Do List Member (2), Tripzzy (2), across 29 distinct plugins, themes and core versions in total.

13 of the 33 disclosed issues have a vendor fix, while 20 remain unpatched. The most severe finding, "Anton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload", scores 9.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#188

of 3,823 researchers

Vulns

33

Critical1
High16
Medium16
Low0
Affected Assets

29

29plugins
Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

33 records
2026-10-14 00:00CVE-2026-86799
7.2
High
Pablo González PérezYes
2026-10-14 00:00CVE-2026-94260
5.3
Medium
Pablo González PérezYes
2026-10-09 00:00CVE-2026-87760
7.2
High
Pablo González PérezNo
2026-10-09 00:00CVE-2026-86798
7.2
High
Pablo González PérezNo
2026-10-09 00:00CVE-2026-104028
9.8
Critical
Pablo González PérezNo
2026-10-09 00:00CVE-2026-87762
7.2
High
Pablo González PérezNo
2026-10-09 00:00CVE-2026-87764
7.2
High
Pablo González PérezNo
2026-10-09 00:00CVE-2026-87761
6.4
Medium
Pablo González PérezNo
2026-10-05 00:00CVE-2026-82212
5.3
Medium
Pablo González PérezNo
2026-10-03 00:00CVE-2026-94270
5.3
Medium
Pablo González PérezNo
Showing 1–10 of 33 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C