Biography
About Kevin Mosbahi
Kevin Mosbahi, also known as Mika, is a French cybersecurity researcher and ethical hacker specializing in WordPress vulnerability and CVE research.
Who I am
My name is Kevin Mosbahi — also written Kévin Mosbahi — and I research security vulnerabilities under the alias Mika. I am a French cybersecurity researcher and ethical hacker, focused on WordPress vulnerability research, CVE discovery and responsible disclosure.
Over time I have discovered and disclosed 700+ vulnerabilities, which places me #7 worldwide on the Wordfence all-time researcher ranking and #1 in France — the French researcher with the most CVEs.
What I do
I audit WordPress plugins by hand, reading source code to find broken access control, privilege escalation, authentication flaws and remote code execution — then report them responsibly so they are patched before public disclosure. My findings include critical vulnerabilities, including unauthenticated privilege escalation and unauthenticated remote code execution.
Alongside the research, I have maintained a 2000+ day consecutive learning streak on TryHackMe — a daily discipline that keeps my fundamentals sharp and which TryHackMe featured in its official blog.
Recognition
- #7 worldwide — Wordfence all-time researcher ranking
- #1 in France — the French researcher with the most CVEs
- Top 8 — Patchstack all-time researcher leaderboard
- 700+ CVEs / vulnerability discoveries, credited across major platforms
- Researcher profiles on Wordfence, Patchstack (Patchstack Alliance) and dbugs
- Credited records on WPScan, GCVE and CIRCL
- Featured in the Patchstack interview and TryHackMe’s 2000-day feature
Elsewhere
- Research: CVE & vulnerability research
- Specialization: WordPress security
- Learning: TryHackMe journey
- Coverage: Publications & recognition
- Write-ups: Mikadmin
- Professional: LinkedIn
Available for WordPress security research, plugin auditing and responsible disclosure collaboration.