← All credits
Dmitrii Ignatyev
411 vulnerability records and advisories credit this contributor.
CVE-2025-11361
Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery
CVE-2026-0561
Shield Security <= 21.0.8 - Unauthenticated Reflected Cross-Site Scripting via 'message' Parameter
CVE-2023-5448
WP Register Profile With Shortcode <= 3.5.9 - Cross-Site Request Forgery to User Password Reset
CVE-2025-12494
Image Gallery – Photo Grid & Video Gallery <= 2.12.28 - Improper Authorization to Authenticated (Author+) Arbitrary Image File Move
CVE-2025-8383
Depicter <= 4.0.4 - Cross-Site Request Forgery
CVE-2025-10476
WP Fastest Cache <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) DB Cleanup Actions
CVE-2023-5618
Modern Footnotes <= 1.4.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-14895
PopupKit <= 2.2.0 - Missing Authorization to Sensitive Information Disclosure and Data Deletion
CVE-2025-13048
Official StatCounter Plugin <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Nickname
CVE-2026-1404
Ultimate Member <= 2.11.1 - Reflected Cross-Site Scripting via Filter Parameters