Spy0x7
Spy0x7 is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #470 of 3,823 contributors. The disclosure was published in 2026.
Their research concentrates on Path Traversal, which accounts for 4 of their findings (40%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Cross-Site Scripting. The average CVSS score across these disclosures is 8.2, peaking at 9.8. Severity breakdown: 3 critical and 6 high.
The most affected software includes AGE-GATE (1), CM Map Locations (1), Cryptocurrency Donation Box (1), across 10 distinct plugins, themes and core versions in total.
4 of the 10 disclosed issues have a vendor fix, while 6 remain unpatched. The most severe finding, "AGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.php", scores 9.8 out of 10.
#470
of 3,823 researchers
10
10
8.2
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C