TarPeg007

TarPeg007 is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,496 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Exposure Of Sensitive Information To An Unauthorized Actor, which accounts for 1 of their findings (50%). Other recurring categories include Server-Side Request Forgery (SSRF). The average CVSS score across these disclosures is 7.1, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes Royal Addons for Elementor (2), across 1 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix. The most severe finding, "Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting", scores 8.8 out of 10.

2026

Critical

High

Medium

Low

Global Rank

#1496

of 3,823 researchers

Vulns

Critical0

High1

Medium1

Low0

Affected Assets

1plugin

Avg CVSS

7.1

Average score of vulnerabilities

Researcher Submissions

2 records


2026-09-11 00:00	Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter Royal Addons for Elementor <= 1.7.1066	`CVE-2026-17585`	5.3 Medium	TarPeg007	Yes
2026-08-15 16:21	Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting Royal Addons for Elementor <= 1.7.1064	`CVE-2026-17123`	8.8 High	TarPeg007	Yes

Showing 1–2 of 2 reports