← All credits
Dmitrii Ignatyev
411 vulnerability records and advisories credit this contributor.
CVE-2025-13922
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause
CVE-2025-12971
Folders <= 3.1.5 - Incorrect Authorization to Authenticated (Contributor+) Folder Content Manipulation
CVE-2023-5710
System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants)
CVE-2024-3563
Genesis Blocks <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sharing Block Attributes
CVE-2023-5527
Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection
CVE-2023-5713
System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value)
CVE-2026-0554
NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset
CVE-2026-3098
Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAll
CVE-2025-11705
Anti-Malware Security and Brute-Force Firewall <= 4.23.81 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
CVE-2026-3231
Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.1.7 - Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field