Dimas Maulana
Dimas Maulana is a security researcher credited with 171 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #46 of 3,899 contributors. Their disclosures were published between 2023 and 2026. The most productive year was 2024, with 110 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 116 of their findings (68%). Other recurring categories include PHP Remote File Inclusion, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.8, peaking at 9.8. Severity breakdown: 31 critical and 17 high.
The most affected software includes Convert Post Types (2), Grab & Save (2), postMash (2), across 167 distinct plugins, themes and core versions in total.
87 of the 171 disclosed issues have a vendor fix, while 84 remain unpatched. The most severe finding, "License For Envato <= 1.0.0 - Unauthenticated Local File Inclusion", scores 9.8 out of 10.
#46
of 3,899 researchers
171
167
6.8
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C