tahu.datar

tahu.datar is a security researcher credited with 29 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #187 of 3,515 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2024, with 26 findings.

Their research concentrates on PHP Remote File Inclusion, which accounts for 26 of their findings (90%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, SQL Injection. The average CVSS score across these disclosures is 9.2, peaking at 9.8. Severity breakdown: 23 critical and 5 high.

The most affected software includes ABC APP CREATOR (1), ACH Invoicing Plugin (1), Checkout Mestres do WP for WooCommerce (1), across 29 distinct plugins, themes and core versions in total.

12 of the 29 disclosed issues have a vendor fix, while 17 remain unpatched. The most severe finding, "Grip <= 1.0.9 - Unauthenticated Local File Inclusion", scores 9.8 out of 10.