ZhongFu Su
ZhongFu Su is a security researcher credited with 82 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #82 of 3,515 contributors. Their disclosures were published between 2021 and 2022. The most productive year was 2021, with 44 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 55 of their findings (67%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.8, peaking at 9.8. Severity breakdown: 4 critical and 23 high.
The most affected software includes GiveWP (3), Advanced Database Cleaner (2), Asset CleanUp (2), across 72 distinct plugins, themes and core versions in total.
79 of the 82 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "WCFM - WooCommerce Multivendor Marketplace <= 3.4.11 - Unauthenticated SQL Injection", scores 9.8 out of 10.
#82
of 3,515 researchers
82
72
6.8
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C