Phil Wylie (mustardbees)
Phil Wylie (mustardbees) is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,016 of 3,515 contributors. Their disclosures were published between 2016 and 2025. The most productive year was 2016, with 2 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 1 of their findings (33%). Other recurring categories include Improper Privilege Management, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 8.3, peaking at 9.8. Severity breakdown: 1 critical and 1 high.
The most affected software includes WP Frontend Profile (2), Abandoned Cart Pro for WooCommerce (1), across 2 distinct plugins, themes and core versions in total.
All 3 disclosed issues have since received a vendor fix. The most severe finding, "WP Front End Profile <= 0.2.1 - Privilege Escalation", scores 9.8 out of 10.
#1016
of 3,515 researchers
3
2
8.3
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C