zaim
zaim is a security researcher credited with 233 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #40 of 3,899 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2025, with 146 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 223 of their findings (96%). Other recurring categories include PHP Remote File Inclusion, Missing Authorization. The average CVSS score across these disclosures is 6.4, peaking at 8.8. Severity breakdown: 0 critical and 9 high.
The most affected software includes Ultimate Blocks (5), Responsive Blocks (4), SKT Blocks (4), across 202 distinct plugins, themes and core versions in total.
179 of the 233 disclosed issues have a vendor fix, while 54 remain unpatched. The most severe finding, "MediaPress <= 1.5.9.1 - Authenticated (Contributor+) Local File Inclusion", scores 8.8 out of 10.
#40
of 3,899 researchers
233
202
6.4
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C