Vijay

Vijay is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #587 of 3,823 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 6 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (38%). Other recurring categories include External Control Of Assumed-Immutable Web Parameter, Improper Verification Of Cryptographic Signature. The average CVSS score across these disclosures is 6.3, peaking at 7.5. Severity breakdown: 0 critical and 2 high.

The most affected software includes CorvusPay WooCommerce Payment Gateway (3), Click to Chat (1), Gum Addon for Elementor (1), across 6 distinct plugins, themes and core versions in total.

All 8 disclosed issues have since received a vendor fix.

20252026
Critical
High
Medium
Low
Global Rank

#587

of 3,823 researchers

Vulns

8

Critical0
High2
Medium6
Low0
Affected Assets

6

5plugins1theme
Avg CVSS

6.3

Average score of vulnerabilities

Researcher Submissions

8 records
2026-09-18 19:58CVE-2026-8354
6.4
Medium
VijayYes
2026-07-10 16:43CVE-2026-6939
7.2
High
VijayYes
2026-07-08 20:43CVE-2026-9028
5.3
Medium
VijayYes
2026-07-08 20:40CVE-2026-9027
5.3
Medium
VijayYes
2026-06-05 14:01CVE-2026-7792
5.3
Medium
VijayYes
2026-06-05 13:37CVE-2026-7795
6.4
Medium
VijayYes
2025-10-10 20:39CVE-2025-9975
6.8
Medium
VijayYes
2025-07-25 16:30CVE-2025-8198
7.5
High
VijayYes
Showing 1–8 of 8 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C