Ryan Fabella

Ryan Fabella is a security researcher credited with 14 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #382 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 5 of their findings (36%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Improper Privilege Management. The average CVSS score across these disclosures is 5.5, peaking at 8.1. Severity breakdown: 0 critical and 3 high.

The most affected software includes CP Media Player (1), Frontend Dashboard (1), InPost PL (1), across 14 distinct plugins, themes and core versions in total.

13 of the 14 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Login & Register Forms <= 4.0.1 - Unauthenticated Account Takeover via Brute Force Password Reset Code", scores 8.1 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#382

of 3,823 researchers

Vulns

14

Critical0
High3
Medium11
Low0
Affected Assets

14

14plugins
Avg CVSS

5.5

Average score of vulnerabilities

Researcher Submissions

14 records
2026-10-14 00:00CVE-2026-87843
5.3
Medium
Ryan FabellaYes
2026-10-14 00:00CVE-2026-94261
5.3
Medium
Ryan FabellaYes
2026-10-14 00:00CVE-2026-107160
7.2
High
Ryan FabellaYes
2026-10-08 00:00CVE-2026-103692
7.3
High
Ryan FabellaYes
2026-10-05 00:00CVE-2026-104651
4.3
Medium
Ryan FabellaYes
2026-10-05 00:00CVE-2026-104678
4.3
Medium
Ryan FabellaYes
2026-10-05 00:00CVE-2026-87782
6.3
Medium
Ryan FabellaYes
2026-09-28 00:00CVE-2026-93580
5.3
Medium
Ryan FabellaYes
2026-09-21 00:00CVE-2026-87981
4.3
Medium
Ryan FabellaYes
2026-09-14 00:00CVE-2026-78474
5.3
Medium
Ryan FabellaYes
Showing 1–10 of 14 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C