Pierre Rudloff

Pierre Rudloff is a security researcher credited with 27 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #201 of 3,515 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2025, with 19 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 19 of their findings (70%). Other recurring categories include Uncontrolled Resource Consumption, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 5.9, peaking at 7.3. Severity breakdown: 0 critical and 3 high.

The most affected software includes Firelight Lightbox (2), Responsive Lightbox & Gallery (2), AAWP Obfuscator (1), across 25 distinct plugins, themes and core versions in total.

18 of the 27 disclosed issues have a vendor fix, while 9 remain unpatched.

202420252026

Critical

High

Medium

Low

Global Rank

#201

of 3,515 researchers

Vulns

Critical0

High3

Medium24

Low0

Affected Assets

27plugins

Avg CVSS

5.9

Average score of vulnerabilities

Researcher Submissions

27 records


2026-08-03 00:00	Content Protector (Passster) <= 4.3.6 - Authenticated (Contributor+) Sensitive Information Exposure Passster <= 4.3.6	`CVE-2025-15674`	4.3 Medium	Pierre Rudloff	Yes
2026-08-02 00:00	Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons < 8.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting Element Pack Addons for Elementor < 8.7.13	`CVE-2026-14817`	6.4 Medium	Pierre Rudloff	Yes
2026-07-13 00:00	Lightbox with PhotoSwipe <= 5.8.0 - Authenticated (Author+) Stored Cross-Site Scripting Lightbox with PhotoSwipe <= 5.8.0	`CVE-2026-14833`	6.4 Medium	Pierre Rudloff	Yes
2026-07-07 00:00	Photo Swipe <= 4.1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting PhotoSwipe <= 4.1.1.1	`CVE-2026-13605`	6.4 Medium	Pierre Rudloff	No
2025-10-01 00:00	Meta Tag Manager <= 3.2 - Open Redirect Meta Tag Manager <= 3.2	`CVE-2025-5983`	4.7 Medium	Pierre Rudloff	Yes
2025-08-25 00:00	PPWP – Password Protect Pages <= 1.9.10 - Authenticated (Subscriber+) Content Exposure via REST API PPWP <= 1.9.10	`CVE-2025-5998`	4.3 Medium	Pierre Rudloff	Yes
2025-08-22 00:00	jQuery Colorbox <= 4.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting jQuery Colorbox <= 4.6.3	`CVE-2025-3650`	6.4 Medium	Pierre Rudloff	No
2025-06-13 00:00	Sharable Password Protected Posts <= 1.1.0 - Unauthenticated Password protected Post Exposure Private Post Share <= 1.1.0	`CVE-2025-5920`	5.3 Medium	Pierre Rudloff	Yes
2025-06-09 00:00	WP Lightbox 2 <= 3.0.6.7 - Unauthenticated Stored Cross-Site Scripting WP Lightbox 2 <= 3.0.6.7	`CVE-2025-3745`	7.2 High	Pierre Rudloff	Yes
2025-06-06 00:00	Firelight Lightbox <= 2.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting Firelight Lightbox <= 2.3.15	`CVE-2025-5035`	6.4 Medium	Pierre Rudloff	Yes

Showing 1–10 of 27 reports