testoun

testoun is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #460 of 3,866 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 10 of their findings (91%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.4, peaking at 7.2. Severity breakdown: 0 critical and 2 high.

The most affected software includes WP-Stats (2), BNE Testimonials (1), Codeless Page Builder (1), across 10 distinct plugins, themes and core versions in total.

5 of the 11 disclosed issues have a vendor fix, while 6 remain unpatched.

2026
Critical
High
Medium
Low
Global Rank

#460

of 3,866 researchers

Vulns

11

Critical0
High2
Medium9
Low0
Affected Assets

10

10plugins
Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

11 records
2026-10-01 00:00CVE-2026-17005
6.4
Medium
testounNo
2026-08-17 00:00CVE-2026-15253
6.4
Medium
testounNo
2026-08-11 00:00CVE-2026-14290
6.4
Medium
testounNo
2026-08-10 00:00CVE-2026-15249
6.4
Medium
testounNo
2026-08-07 00:00CVE-2026-19794
7.2
High
testounYes
2026-08-07 00:00CVE-2026-66426
7.2
High
testounYes
2026-08-05 00:00CVE-2026-17010
6.4
Medium
testounYes
2026-08-03 00:00CVE-2026-15245
6.4
Medium
testounYes
2026-08-01 00:00CVE-2026-15234
6.4
Medium
testounNo
2026-07-31 00:00CVE-2026-16537
6.4
Medium
testounYes
Showing 1–10 of 11 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C