yzx001
yzx001 is a security researcher credited with 15 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #382 of 3,984 contributors. The disclosure was published in 2026.
Their research concentrates on Missing Authorization, which accounts for 7 of their findings (47%). Other recurring categories include Improper Neutralization Of Input During Web Page Generation, Cross-Site Request Forgery. The average CVSS score across these disclosures is 5.7, peaking at 8.1. Severity breakdown: 0 critical and 3 high.
The most affected software includes SureDash (6), Ad Inserter (2), Media Library Assistant (2), across 7 distinct plugins, themes and core versions in total.
All 15 disclosed issues have since received a vendor fix. The most severe finding, "SureDash – Community, Courses & Member Dashboard <= 1.12.3 - Authenticated (Subscriber+) Arbitrary File Deletion", scores 8.1 out of 10.
#382
of 3,984 researchers
15
7
5.7
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C