Ryoma Nishioka

Ryoma Nishioka is a security researcher credited with 6 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #722 of 3,878 contributors. Their disclosures were published between 2021 and 2026. The most productive year was 2026, with 4 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 2 of their findings (33%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 6.7, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes Admin Custom Login (2), Context Blog (1), Easy Appointments (1), across 5 distinct plugins, themes and core versions in total.

All 6 disclosed issues have since received a vendor fix. The most severe finding, "Admin Custom Login <= 3.2.7 – Cross-Site Request Forgery to Stored Cross-Site Scripting", scores 8.8 out of 10.

202120222023202420252026

Critical

High

Medium

Low

Global Rank

#722

of 3,878 researchers

Vulns

Critical0

High2

Medium4

Low0

Affected Assets

4plugins1theme

Avg CVSS

6.7

Average score of vulnerabilities

Researcher Submissions

6 records


2026-09-18 18:53	Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information Exposure via ea_get_customers_ajax AJAX Action Easy Appointments <= 3.12.27	`CVE-2026-9232`	6.5 Medium	Ryoma Nishioka	Yes
2026-08-15 15:24	Admin Custom Login <= 3.6.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Message Above Login Form' Setting Admin Custom Login <= 3.6.4	`CVE-2026-2487`	4.4 Medium	Ryoma Nishioka	Yes
2026-08-04 19:33	WP Post Author <= 3.9.1 - Authenticated (Author+) SQL Injection WP Post Author <= 3.9.1	`CVE-2026-11977`	6.5 Medium	Ryoma Nishioka	Yes
2026-07-10 17:12	Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' Parameter Context Blog <= 1.3.5	`CVE-2026-6801`	5.3 Medium	Ryoma Nishioka	Yes
2021-07-26 06:00	Admin Custom Login <= 3.2.7 – Cross-Site Request Forgery to Stored Cross-Site Scripting Admin Custom Login <= 3.2.7	`CVE-2021-34628`	8.8 High	Ryoma Nishioka	Yes
2021-07-14 00:00	Meta Data Filter & Taxonomies Filter <= 1.2.7.2 - Cross-Site Request Forgery MDTF < 2.2.8	`CVE-2021-20781`	8.8 High	Ryoma Nishioka	Yes

Showing 1–6 of 6 reports