Whit Taylor

Whit Taylor is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #959 of 3,515 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2025, with 3 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 3 of their findings (75%). Other recurring categories include Improper Access Control. The average CVSS score across these disclosures is 5.0, peaking at 5.3.

The most affected software includes Clearfy Cache (2), Event Tickets and Registration (1), Paid Memberships Pro (1), across 3 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

20242025

Critical

High

Medium

Low

Global Rank

#959

of 3,515 researchers

Vulns

Critical0

High0

Medium4

Low0

Affected Assets

3plugins

Avg CVSS

5.0

Average score of vulnerabilities

Researcher Submissions

4 records


2025-04-11 00:00	Webcraftic Clearfy – WordPress optimization plugin <= 2.3.2 - Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcr_clearfy' Clearfy Cache <= 2.3.2	`CVE-2024-13337`	4.3 Medium	Whit Taylor	Yes
2025-04-11 00:00	Webcraftic Clearfy – WordPress optimization plugin <= 2.3.1 - Cross-Site Request Forgery to Clear Cache Clearfy Cache <= 2.3.1	`CVE-2024-13338`	5.3 Medium	Whit Taylor	Yes
2025-01-29 18:25	Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure Event Tickets and Registration <= 5.18.1	`CVE-2024-13457`	5.3 Medium	Whit Taylor	Yes
2024-04-15 00:00	Paid Memberships Pro <= 3.0.1 - Cross-Site Request Forgery Paid Memberships Pro <= 3.0.1	`CVE-2024-3215`	5.3 Medium	Whit Taylor	Yes

Showing 1–4 of 4 reports