Usama Arshad

Usama Arshad is a security researcher credited with 41 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #160 of 3,878 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2026, with 40 findings.

Their research concentrates on Exposure Of Sensitive Information To An Unauthorized Actor, which accounts for 18 of their findings (44%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Missing Authorization. The average CVSS score across these disclosures is 5.2, peaking at 9.8. Severity breakdown: 1 critical and 0 high.

The most affected software includes Easy Property Listings (2), Project Manager (2), RestroPress (2), across 37 distinct plugins, themes and core versions in total.

38 of the 41 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "CheckView <= 2.3.1 - Unauthenticated REST API Authorization Bypass to Privilege Escalation", scores 9.8 out of 10.