Shikhali Jamalzade

Shikhali Jamalzade is a security researcher credited with 21 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #280 of 3,917 contributors. The disclosure was published in 2026.

Their research concentrates on Exposure Of Sensitive Information To An Unauthorized Actor, which accounts for 8 of their findings (38%). Other recurring categories include Missing Authorization, Authorization Bypass Through User-Controlled Key. The average CVSS score across these disclosures is 4.9, peaking at 6.5.

The most affected software includes Advanced Classifieds & Directory Pro (1), CatalogX Product Catalog (1), CatFolders Document Gallery & PDF… (1), across 21 distinct plugins, themes and core versions in total.

All 21 disclosed issues have since received a vendor fix.

2026
Critical
High
Medium
Low
Global Rank

#280

of 3,917 researchers

Vulns

21

Critical0
High0
Medium21
Low0
Affected Assets

21

21plugins
Avg CVSS

4.9

Average score of vulnerabilities

Researcher Submissions

21 records
2026-10-06 00:00CVE-2026-85348
4.3
Medium
Shikhali JamalzadeYes
2026-09-07 00:00CVE-2026-75861
4.3
Medium
Shikhali JamalzadeYes
2026-08-31 00:00CVE-2026-74927
5.3
Medium
Shikhali JamalzadeYes
2026-08-31 00:00CVE-2026-79621
5.3
Medium
Shikhali JamalzadeYes
2026-08-29 00:00CVE-2026-19430
5.3
Medium
Shikhali JamalzadeYes
2026-08-28 00:00CVE-2026-78137
5.3
Medium
Shikhali JamalzadeYes
2026-08-28 00:00CVE-2026-79615
4.3
Medium
Shikhali JamalzadeYes
2026-08-28 00:00CVE-2026-77695
5.3
Medium
Shikhali JamalzadeYes
2026-08-27 00:00CVE-2026-78138
4.3
Medium
Shikhali JamalzadeYes
2026-08-27 00:00CVE-2026-78139
4.3
Medium
Shikhali JamalzadeYes
Showing 1–10 of 21 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C