← All credits
Dmitrii Ignatyev
414 vulnerability records and advisories credit this contributor.
CVE-2025-13749
Clearfy <= 2.4.0 - Cross-Site Request Forgery to Update Notification Tampering
CVE-2025-10588
PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification
CVE-2023-5714
System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs)
CVE-2025-11703
WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning
CVE-2026-2386
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Author+) Arbitrary Draft Post Creation via 'post_type'
CVE-2025-13620
Wp Social Login and Register Social Counter <= 3.1.3 - Missing Authorization in Cache REST Endpoints to Social Counter Tampering
CVE-2025-8595
Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import
CVE-2025-11427
WP Migrate Lite <= 2.7.6 - Unauthenticated Blind Server-Side Request Forgery
CVE-2023-5816
Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading
CVE-2024-3513
Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via title tag attribute