Alyudin Nafiie

20252026

Critical

High

Medium

Low

Global Rank

#222

of 3,238 researchers

Vulns

21

Critical16

High5

Medium0

Low0

Affected Assets

18

17plugins1theme

Avg CVSS

9.5

Average score of vulnerabilities

Researcher Submissions

21 records


2026-07-07 16:31	WP Learn Manager <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation and Activation via jslearnmanager_ajax AJAX Action WP Learn Manager <= 1.1.8	`CVE-2026-12153`	9.8 Critical	Alyudin Nafiie	No
2026-06-26 16:05	Invoice Generator <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover via 'user_id' Parameter Invoice Generator <= 1.0.0	`CVE-2026-12415`	9.8 Critical	Alyudin Nafiie	No
2026-06-23 16:37	Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter Invoice Generator <= 1.0.0	`CVE-2026-12416`	9.8 Critical	Alyudin Nafiie	No
2026-06-23 16:37	SignUp & SignIn <= 1.0.0 - Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account Takeover SignUp & SignIn <= 1.0.0	`CVE-2026-12417`	9.8 Critical	Alyudin Nafiie	No
2026-02-18 18:11	s2Member <= 260127 - Unauthenticated Privilege Escalation via Account Takeover s2Member <= 260127	`CVE-2026-1994`	9.8 Critical	Alyudin Nafiie	Yes
2026-02-18 15:49	Lizza LMS Pro <= 1.0.3 - Unauthenticated Privilege Escalation Lizza LMS Pro <= 1.0.3	`CVE-2025-13563`	9.8 Critical	Alyudin Nafiie	Yes
2026-02-18 15:10	Clasifico Listing <= 2.0 - Unauthenticated Privilege Escalation Clasifico Listing <= 2.0	`CVE-2025-12882`	9.8 Critical	Alyudin Nafiie	No
2026-02-13 20:06	Truelysell Core <= 1.8.7 - Unauthenticated Privilege Escalation via Registration Truelysell Core <= 1.8.7	`CVE-2025-8572`	9.8 Critical	Alyudin Nafiie	Yes
2025-11-24 15:49	EduKart Pro <= 1.0.3 - Unauthenticated Privilege Escalation EduKart Pro <= 1.0.3	`CVE-2025-13559`	9.8 Critical	Alyudin Nafiie	No
2025-10-31 18:22	Doccure Core < 1.5.4 - Unauthenticated Privilege Escalation Doccure Core < 1.5.4	`CVE-2025-8900`	9.8 Critical	Alyudin Nafiie	Yes

Showing 1–10 of 21 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C