VDsec
VDsec is a security researcher credited with 6 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #693 of 3,823 contributors. The disclosure was published in 2026.
Their research concentrates on SQL Injection, which accounts for 2 of their findings (33%). Other recurring categories include Cross-Site Request Forgery (CSRF), Deserialization Of Untrusted Data. The average CVSS score across these disclosures is 7.6, peaking at 9.8. Severity breakdown: 2 critical and 2 high.
The most affected software includes ACPT (Premium) (3), BuddyBoss Platform (1), miniOrange OTP Login (1), across 4 distinct plugins, themes and core versions in total.
3 of the 6 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "ACPT (Premium) <= 2.0.63 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.
#693
of 3,823 researchers
6
4
7.6
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C