Sajjad Haqi

Sajjad Haqi is a security researcher credited with 7 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #670 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 2 of their findings (29%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 5.2, peaking at 6.5.

The most affected software includes Media Library Assistant (2), WP Crowdfunding (2), Paymob for WooCommerce (1), across 5 distinct plugins, themes and core versions in total.

All 7 disclosed issues have since received a vendor fix.

2026
Critical
High
Medium
Low

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C