Dmitrii Ignatyev

Dmitrii Ignatyev is a security researcher credited with 428 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #18 of 3,899 contributors. Their disclosures were published between 2023 and 2026. The most productive year was 2024, with 170 findings.

Their research concentrates on Improper Neutralization Of Input During Web Page Generation, which accounts for 271 of their findings (63%). Other recurring categories include Missing Authorization, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 5.4, peaking at 9.8. Severity breakdown: 6 critical and 31 high.

The most affected software includes Email Subscribers & Newsletters… (9), Shortcodes Ultimate (8), Form Maker by 10Web (7), across 261 distinct plugins, themes and core versions in total.

420 of the 428 disclosed issues have a vendor fix, while 8 remain unpatched. The most severe finding, "JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing", scores 9.8 out of 10.

2023202420252026
Critical
High
Medium
Low
Global Rank

#18

of 3,899 researchers

Vulns

428

Critical6
High31
Medium385
Low6
Affected Assets

265

256plugins9themes
Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

428 records
2026-10-19 00:00CVE-2026-111574
7.2
High
Dmitrii IgnatyevYes
2026-10-14 16:31CVE-2026-18557
6.1
Medium
Dmitrii IgnatyevYes
2026-10-02 18:40CVE-2026-92767
6.4
Medium
Dmitrii IgnatyevYes
2026-09-30 00:00CVE-2026-97317
5.3
Medium
Dmitrii IgnatyevYes
2026-09-28 00:00CVE-2026-87777
6.4
Medium
Dmitrii IgnatyevYes
2026-09-25 00:00CVE-2026-96895
6.4
Medium
Dmitrii IgnatyevYes
2026-09-25 00:00CVE-2026-97319
6.4
Medium
Dmitrii IgnatyevYes
2026-09-25 00:00CVE-2026-97227
4.3
Medium
Dmitrii IgnatyevYes
2026-09-24 18:22CVE-2026-92746
6.4
Medium
Dmitrii IgnatyevYes
2026-09-24 00:00CVE-2026-96531
6.4
Medium
Dmitrii IgnatyevYes
Showing 1–10 of 250 reports

Showing the 250 most recent of 428 records. Every record has its own page and is listed in the sitemap.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C