Rafshanzani Suhada
Rafshanzani Suhada is a security researcher credited with 142 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #55 of 3,515 contributors. Their disclosures were published between 2022 and 2026. The most productive year was 2023, with 83 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 51 of their findings (36%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 5.7, peaking at 9.1. Severity breakdown: 1 critical and 15 high.
The most affected software includes GiveWP (5), Arigato Autoresponder and Newsletter (3), Lasso Lite (3), across 111 distinct plugins, themes and core versions in total.
130 of the 142 disclosed issues have a vendor fix, while 12 remain unpatched. The most severe finding, "Simple File List <= 6.1.9 - Unauthenticated Arbitrary File Deletion", scores 9.1 out of 10.
#55
of 3,515 researchers
142
111
5.7
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C