← All credits
Dmitrii Ignatyev
411 vulnerability records and advisories credit this contributor.
CVE-2025-14059
EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal
CVE-2026-3903
Modular Connector <= 2.5.1 - Cross-Site Request Forgery via postConfirmOauth
CVE-2025-10645
WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log
CVE-2025-11166
WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2025-12359
Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery
CVE-2025-9979
Maspik <= 2.5.6 - Authenticated (Subscriber+) Missing Authorization to Spam Log Export
CVE-2025-11369
Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure
CVE-2023-5772
Debug Log Manager <= 2.2.0 - Cross-Site Request Forgery
CVE-2025-14163
Premium Addons for Elementor <= 4.11.53 - Cross-Site Request Forgery via 'insert_inner_template'
CVE-2025-13891
Image Gallery – Photo Grid & Video Gallery (Modula) <= 2.13.3 - Missing Authorization to Arbitrary Directory Listing