Pedro Pinho
Pedro Pinho is a security researcher credited with 65 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #99 of 3,899 contributors. The disclosure was published in 2026.
Their research concentrates on Missing Authorization, which accounts for 21 of their findings (32%). Other recurring categories include Client-Side Enforcement Of Server-Side Security, Authorization Bypass Through User-Controlled Key. The average CVSS score across these disclosures is 6.0, peaking at 9.8. Severity breakdown: 7 critical and 10 high.
The most affected software includes Rox Appointment Booking (2), Academy LMS (1), AcyMailing (1), across 64 distinct plugins, themes and core versions in total.
54 of the 65 disclosed issues have a vendor fix, while 11 remain unpatched. The most severe finding, "OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Account Takeover", scores 9.8 out of 10.
#99
of 3,899 researchers
68
67
6.0
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C