Wordfence Argus
Wordfence Argus is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #555 of 3,823 contributors. The disclosure was published in 2026.
Their research concentrates on Code Injection, which accounts for 2 of their findings (25%). Other recurring categories include Deserialization Of Untrusted Data, Cross-Site Scripting. The average CVSS score across these disclosures is 9.1, peaking at 9.8. Severity breakdown: 5 critical and 3 high.
The most affected software includes Avada (Fusion) Builder (2), The Events Calendar (2), Gravity Forms (1), across 6 distinct plugins, themes and core versions in total.
All 8 disclosed issues have since received a vendor fix. The most severe finding, "The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocation", scores 9.8 out of 10.
#555
of 3,823 researchers
8
8
9.1
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C