R4mbb

R4mbb is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #871 of 3,878 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 3 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (75%). Other recurring categories include SQL Injection. The average CVSS score across these disclosures is 5.8, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Form Maker by 10Web (1), GD Rating System (1), Gutenverse (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

20252026

Critical

High

Medium

Low

Global Rank

#871

of 3,878 researchers

Vulns

Critical0

High1

Medium4

Low0

Affected Assets

4plugins

Avg CVSS

5.5

Average score of vulnerabilities

Researcher Submissions

4 records


2026-10-02 00:00	GD Rating System <= 3.7.1 - Unauthenticated Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX GD Rating System <= 3.7.1	`CVE-2026-93430`	7.2 High	R4mbb	Yes
2026-08-14 00:00	Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause Form Maker by 10Web <= 1.15.44	`CVE-2026-15993`	5.3 Medium	R4mbb	Yes
2026-06-26 17:52	Gutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter Gutenverse <= 3.8.0	`CVE-2026-12399`	4.4 Medium	R4mbb	Yes
2025-05-07 00:00	Meow Gallery <= 5.2.7 - Authenticated (Author+) Stored Cross-Site Scripting Meow Gallery <= 5.2.7	`CVE-2025-47449`	6.4 Medium	R4mbb	Yes

Showing 1–4 of 4 reports