she11f
she11f is a security researcher credited with 22 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #261 of 3,823 contributors. The disclosure was published in 2026.
Their research concentrates on Cross-Site Scripting, which accounts for 7 of their findings (32%). Other recurring categories include Missing Authorization, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 6.4, peaking at 9.8. Severity breakdown: 1 critical and 9 high.
The most affected software includes Smart Online Order for Clover (3), Barcode Scanner (+Mobile App) (2), AWP Classifieds (1), across 19 distinct plugins, themes and core versions in total.
21 of the 22 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "OTP Login With Phone Number, OTP Verification <= 1.8.70 - OTP Brute Force", scores 9.8 out of 10.
#261
of 3,823 researchers
22
19
6.4
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C