theviper17y
theviper17y is a security researcher credited with 265 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #31 of 3,515 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2025, with 158 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 153 of their findings (58%). Other recurring categories include Missing Authorization, Server-Side Request Forgery (SSRF). The average CVSS score across these disclosures is 6.6, peaking at 10.0. Severity breakdown: 12 critical and 43 high.
The most affected software includes Bold Page Builder (3), The Plus Addons for Elementor (3), Compact WP Audio Player (2), across 250 distinct plugins, themes and core versions in total.
151 of the 265 disclosed issues have a vendor fix, while 114 remain unpatched. The most severe finding, "Woo Inquiry <= 0.1 - Unauthenticated SQL Injection", scores 10.0 out of 10.
#31
of 3,515 researchers
265
259
6.6
Average score of vulnerabilities
Researcher Submissions
Showing the 250 most recent of 265 records. Every record has its own page and is listed in the sitemap.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C