Tony

Tony is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,534 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (100%). The average CVSS score across these disclosures is 5.9, peaking at 6.4.

The most affected software includes Jeg Kit for Elementor (1), Ultimate Addons for Elementor (1), across 2 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix.

2025

Critical

High

Medium

Low

Global Rank

#1534

of 3,515 researchers

Vulns

Critical0

High0

Medium2

Low0

Affected Assets

2plugins

Avg CVSS

5.9

Average score of vulnerabilities

Researcher Submissions

2 records


2025-10-03 00:00	Jeg Kit for Elementor – Powerful Elementor Addons, Widgets & Templates for WordPress < 2.6.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Jeg Kit for Elementor <= 2.6.9	`CVE-2025-9978`	5.4 Medium	Tony	Yes
2025-09-15 00:00	Ultimate Addons for Elementor Lite <= 2.4.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload Ultimate Addons for Elementor <= 2.4.9	`CVE-2025-9703`	6.4 Medium	Tony	Yes

Showing 1–2 of 2 reports