← All credits
Dmitrii Ignatyev
414 vulnerability records and advisories credit this contributor.
CVE-2026-3585
The Events Calendar <= 6.15.17 - Authenticated (Author+) Arbitrary File Read via ajax_create_import
CVE-2025-11519
Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload
CVE-2026-2917
Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter
CVE-2025-14059
EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal
CVE-2026-3903
Modular Connector <= 2.5.1 - Cross-Site Request Forgery via postConfirmOauth
CVE-2025-10645
WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log
CVE-2025-11166
WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2025-12359
Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery
CVE-2025-9979
Maspik <= 2.5.6 - Authenticated (Subscriber+) Missing Authorization to Spam Log Export
CVE-2025-11369
Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure