zakaria

zakaria is a security researcher credited with 129 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #59 of 3,515 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2025, with 60 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 129 of their findings (100%). The average CVSS score across these disclosures is 6.4, peaking at 6.4.

The most affected software includes 1180px Shortcodes (1), 3D Viewer Online (1), Ad Short (1), across 129 distinct plugins, themes and core versions in total.

32 of the 129 disclosed issues have a vendor fix, while 97 remain unpatched.

202420252026

Critical

High

Medium

Low

Global Rank

#59

of 3,515 researchers

Vulns

129

Critical0

High0

Medium129

Low0

Affected Assets

129

129plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

129 records


2026-07-27 21:29	Shortcodify <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute Shortcodify <= 1.4.3	`CVE-2026-11598`	5.0 Medium	zakaria	No
2026-06-26 17:50	Surbma \| Infusionsoft Shortcode <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Surbma <= 2.0.1	`CVE-2026-11597`	6.4 Medium	zakaria	Yes
2026-06-23 16:42	MIR blocks and shortcodes <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes MIR blocks and shortcodes <= 1.0.0	`CVE-2026-8896`	6.4 Medium	zakaria	No
2026-06-17 19:25	Fancy Testimonials <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting Fancy Testimonials <= 1.0	`CVE-2026-8039`	6.4 Medium	zakaria	No
2026-06-08 15:07	TinyMCE shortcode Addon <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btnrel' Shortcode Attribute TinyMCE shortcode Addon <= 1.0.0	`CVE-2026-10024`	6.4 Medium	zakaria	No
2026-06-08 15:04	ePaperFlip Publisher <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'publicationid' Shortcode Attribute Plugin Name <= 1	`CVE-2026-7662`	6.4 Medium	zakaria	No
2026-06-01 19:45	Easy Cart <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Easy Cart <= 1.8	`CVE-2026-4080`	6.4 Medium	zakaria	Yes
2026-06-01 19:44	DeMomentSomTres Shortcodes <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes DeMomentSomTres Shortcodes <= 1.1.1	`CVE-2026-8885`	6.4 Medium	zakaria	No
2026-05-26 18:56	Github Shortcode <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Github Shortcode <= 0.1	`CVE-2026-8042`	6.4 Medium	zakaria	No
2026-05-26 17:27	Shortcode Buddy <= 0.1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Shortcode Buddy <= 0.1.9.5	`CVE-2026-8897`	6.4 Medium	zakaria	No

Showing 1–10 of 129 reports