SENTINELA WP WORDPRESS SECURITY Home

About

Security research, no middleman.

I'm Liedson Ribeiro. I work with WordPress security: plugin and theme audits, incident response and vulnerability monitoring.

I have reported CVE-tracked flaws in WordPress plugins — with an advisory, a fixed version and public credit to Sentinela WP. I keep publishing what I find and what remains as a lesson.

I work solo. The person answering WhatsApp is the person doing the work: no support queue, no handoff to a third party, no 24/7 promise. The commitment is a same business day response and a clear scope before any payment.

I focus on WordPress because that's where most sites that sell run — and where the gap between an outdated plugin and an incident is short.

WhatsApp zenitih@proton.me Discord · yannix_dex
SENTINELA WP EST. 2026 WORDPRESS SECURITY PT · EN

Independent research · solo

Research

Reported CVEs

Flaws with a public advisory, fixed version and writeup. No invented detail and no exploit before the patch.

How I work

Method

The same path for audits and incident response: understand the flow, prove the impact, document the fix.

  1. 01 gate

    Gate

    I confirm version, install and accepted vulnerability type. Without it, I don't start.

  2. 02 diff

    Diff

    I compare versions and read the patch. Where the fix changed, the bug was.

  3. 03 censo

    Sink census

    I list sinks and input flows: where external data reaches a dangerous operation.

  4. 04 lab

    Lab

    I reproduce locally with WordPress, Docker and a negative control.

  5. 05 evidência

    Evidence

    I capture request/response, canary and browser execution. Packaged with hashes.

  6. 06 report

    Report

    I write the advisory with file:line, impact, honest CVSS and the fix.

Tools

  • WordPress
  • PHP
  • Burp Suite
  • WPScan
  • Semgrep
  • Docker
  • Astro

Contact

Direct contact

If your problem is WordPress, it's probably mine. Send the context and I'll define the scope before any payment.

Talk on WhatsApp Send email
WhatsApp