Sorra

Sorra is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,816 of 3,917 contributors. The disclosure was published in 2026.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 1 of their findings (50%). Other recurring categories include Improper Neutralization Of Input During Web Page Generation. The average CVSS score across these disclosures is 5.3, peaking at 6.4.

The most affected software includes Appointment Booking Plugin (1), Directorist (1), across 2 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix.

2026
Critical
High
Medium
Low

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C