w41bu1

w41bu1 is a security researcher credited with 20 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #254 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 18 findings.

Their research concentrates on Missing Authorization, which accounts for 7 of their findings (35%). Other recurring categories include Cross-Site Scripting, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 5.7, peaking at 7.5. Severity breakdown: 0 critical and 5 high.

The most affected software includes Advanced Related Posts (1), AI ChatBot with ChatGPT and Content… (1), Appointment Booking Plugin (1), across 20 distinct plugins, themes and core versions in total.

18 of the 20 disclosed issues have a vendor fix, while 2 remain unpatched.

20252026

Critical

High

Medium

Low

Global Rank

#254

of 3,515 researchers

Vulns

Critical0

High5

Medium15

Low0

Affected Assets

19plugins1theme

Avg CVSS

5.7

Average score of vulnerabilities

Researcher Submissions

20 records


2026-07-02 00:00	Speaker <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting Speaker <= 4.1.13	`CVE-2026-57783`	6.4 Medium	w41bu1	No
2026-07-02 00:00	SportsPress Pro <= 2.7.29 - Authenticated (Contributor+) Local File Inclusion SportsPress Pro <= 2.7.29	`CVE-2026-57749`	7.5 High	w41bu1	No
2026-04-23 00:00	Bricks <= 1.9.2 - Reflected Cross-Site Scripting Bricks <= 1.9.2	`CVE-2026-41554`	6.1 Medium	w41bu1	Yes
2026-04-23 00:00	bBlocks – Essential Gutenberg Blocks & Patterns Collection < 2.0.30 - Missing Authorization bBlocks < 2.0.30	`CVE-2026-32489`	5.3 Medium	w41bu1	Yes
2026-03-20 00:00	Image Slider by Ays- Responsive Slider and Carousel <= 2.7.1 - Unauthenticated Stored Cross-Site Scripting Image Slider by Ays- Responsive Slider… <= 2.7.1	`CVE-2026-32494`	7.2 High	w41bu1	Yes
2026-03-20 00:00	FAQ Builder AYS <= 1.8.2 - Unauthenticated Stored Cross-Site Scripting FAQ Builder AYS <= 1.8.2	`CVE-2026-25346`	7.2 High	w41bu1	Yes
2026-03-10 00:00	UiPress lite \| Effortless custom dashboards, admin themes and pages <= 3.5.09 - Missing Authorization UiPress lite <= 3.5.09	`CVE-2026-27091`	4.3 Medium	w41bu1	Yes
2026-02-16 00:00	Calculated Fields Form <= 5.4.4.1 - Missing Authorization Calculated Fields Form <= 5.4.4.1	`CVE-2026-25368`	4.3 Medium	w41bu1	Yes
2026-02-10 00:00	Quiz Maker <= 6.7.1.2 - Cross-Site Request Forgery Quiz Maker by AYS <= 6.7.1.2	`CVE-2026-32342`	4.3 Medium	w41bu1	Yes
2026-02-09 00:00	Easy Form <= 2.7.9 - Missing Authorization Easy Form <= 2.7.9	`CVE-2026-32332`	5.3 Medium	w41bu1	Yes

Showing 1–10 of 20 reports