R2D2

R2D2 is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,590 of 3,333 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 1 of their findings (50%). Other recurring categories include Path Traversal. The average CVSS score across these disclosures is 4.8, peaking at 5.3.

The most affected software includes FastDup (1), pCloud WP Backup (1), across 2 distinct plugins, themes and core versions in total.

1 of the 2 disclosed issues have a vendor fix, while 1 remain unpatched.

2026
Critical
High
Medium
Low
Global Rank

#1590

of 3,333 researchers

Vulns

2

Critical0
High0
Medium2
Low0
Affected Assets

2

2plugins
Avg CVSS

4.8

Average score of vulnerabilities

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C