winrace
winrace is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,592 of 3,333 contributors. The disclosure was published in 2026.
Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 1 of their findings (50%). Other recurring categories include Missing Authorization. The average CVSS score across these disclosures is 4.8, peaking at 5.3.
The most affected software includes LearnPress (1), Simply Schedule Appointments (1), across 2 distinct plugins, themes and core versions in total.
All 2 disclosed issues have since received a vendor fix.
#1592
of 3,333 researchers
2
2
4.8
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C