Wordfence

Wordfence is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #749 of 3,515 contributors. Their disclosures were published between 2017 and 2023. The most productive year was 2021, with 2 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 1 of their findings (20%). Other recurring categories include Embedded Malicious Code, Hidden Functionality. The average CVSS score across these disclosures is 7.0, peaking at 9.8. Severity breakdown: 2 critical and 0 high.

The most affected software includes Duplicate Page and Post (1), Ignition (1), JetWidgets For Elementor (1), across 5 distinct plugins, themes and core versions in total.

3 of the 5 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "Duplicate Page and Post <= 2.1.1 - Malicious Backdoor", scores 9.8 out of 10.

2017201820192020202120222023

Critical

High

Medium

Low

Global Rank

#749

of 3,515 researchers

Vulns

Critical2

High0

Medium3

Low0

Affected Assets

14plugins11themes

Avg CVSS

7.0

Average score of vulnerabilities

Researcher Submissions

5 records


2023-01-04 00:00	JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Update JetWidgets For Elementor <= 1.0.12	`CVE-2023-0086`	5.4 Medium	Chloe Chamberland	Yes
2021-04-23 00:00	Multiple Thrive Themes and Plugins (Various Versions) - Arbitrary Options Update Thrive Optimize < 1.4.13.3	`CVE-2021-24219`	5.3 Medium	Wordfence	Yes
2021-03-24 00:00	Multiple Thrive Themes < 2.0.0 - Arbitrary File Upload Ignition < 2.0.0	`CVE-2021-24220`	9.1 Critical	Wordfence	Yes
2017-12-28 00:00	No Follow All External Links 2.1.0 - 2.3.0 - Backdoor No Follow All External Links 2.1.0 – 2.3.0	`N/A`	5.3 Medium	Wordfence	No
2017-12-27 00:00	Duplicate Page and Post <= 2.1.1 - Malicious Backdoor Duplicate Page and Post <= 2.1.1	`N/A`	9.8 Critical	Wordfence	No

Showing 1–5 of 5 reports