0xd4rk5id3

0xd4rk5id3 is a security researcher credited with 311 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #25 of 3,515 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2025, with 247 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 174 of their findings (56%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization. The average CVSS score across these disclosures is 6.5, peaking at 9.8. Severity breakdown: 26 critical and 39 high.

The most affected software includes Divi Form Builder (3), Felan Framework (3), RegistrationMagic (3), across 291 distinct plugins, themes and core versions in total.

137 of the 311 disclosed issues have a vendor fix, while 174 remain unpatched. The most severe finding, "Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout", scores 9.8 out of 10.

202420252026

Critical

High

Medium

Low

Global Rank

#25

of 3,515 researchers

Vulns

311

Critical26

High39

Medium246

Low0

Affected Assets

292

279plugins13themes

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

311 records


2026-09-04 18:31	WP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter WP File Download <= 6.3.8	`CVE-2026-14975`	6.5 Medium	0xd4rk5id3	Yes
2026-09-01 13:55	WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' Parameter WP File Download <= 6.3.4	`CVE-2026-14982`	8.1 High	0xd4rk5id3	Yes
2026-08-29 06:31	Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout Custom User Registration Fields… <= 2.2.3	`CVE-2026-15369`	9.8 Critical	0xd4rk5id3	Yes
2026-08-24 07:41	WordPress & WooCommerce Affiliate Program <= 8.9.1 - Unauthenticated Privilege Escalation WordPress & WooCommerce Affiliate… <= 8.9.1	`CVE-2026-32558`	7.3 High	0xd4rk5id3	No
2026-08-19 00:00	User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 5.4.5 - Unauthenticated Privilege Escalation via Account Takeover User Registration PRO <= 5.4.5	`CVE-2026-74001`	9.8 Critical	0xd4rk5id3	Yes
2026-08-14 20:22	Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision Real Estate Manager Pro <= 12.8.6	`CVE-2026-15142`	7.5 High	0xd4rk5id3	Yes
2026-08-13 00:00	Piotnet Addons For Elementor Pro <= 7.1.67 - Unauthenticated Arbitrary File Upload Piotnet Addons For Elementor Pro <= 7.1.67	`CVE-2026-28192`	9.8 Critical	0xd4rk5id3	No
2026-07-24 17:26	Checkout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' Parameter Checkout Field Editor for WooCommerce… <= 3.7.7	`CVE-2026-14955`	6.5 Medium	0xd4rk5id3	Yes
2026-07-16 13:00	Bricksforge <= 3.1.8.6 - Unauthenticated Privilege Escalation via Pro Forms fieldIds Parameter Bricksforge <= 3.1.8.6	`CVE-2026-14956`	9.8 Critical	0xd4rk5id3	Yes
2026-07-09 00:00	Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit <= 2.8.3 - Unauthenticated Arbitrary File Upload Aimogen Pro - All-in-One AI Content… <= 2.8.3	`CVE-2026-57719`	9.8 Critical	0xd4rk5id3	Yes

Showing 1–10 of 250 reports

Showing the 250 most recent of 311 records. Every record has its own page and is listed in the sitemap.