Dmitrii Ignatyev

2023202420252026

Critical

High

Medium

Low

Global Rank

#17

of 3,238 researchers

Vulns

394

Critical6

High26

Medium356

Low6

Affected Assets

247

239plugins8themes

Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

393 records


2026-07-24 17:58	Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name) Yoast SEO <= 28.0	`CVE-2026-15425`	6.4 Medium	Dmitrii Ignatyev	Yes
2026-07-10 14:36	PDF Invoices & Packing Slips for WooCommerce <= 5.14.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'order_id' Shortcode Attribute PDF Invoices & Packing Slips for WooCom… <= 5.14.0	`CVE-2026-13116`	4.3 Medium	Dmitrii Ignatyev	Yes
2026-07-07 23:38	Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup Essential Addons for Elementor <= 6.6.2	`CVE-2026-6459`	6.4 Medium	Dmitrii Ignatyev	Yes
2026-07-06 11:49	Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title Exclusive Addons for Elementor <= 2.7.9.8	`CVE-2026-11328`	6.4 Medium	Dmitrii Ignatyev	Yes
2026-07-01 17:26	Image Optimizer <= 1.7.4 - Authenticated (Author+) Arbitrary File Deletion via Post Meta Field Injection Image Optimization <= 1.7.4	`CVE-2026-5821`	8.1 High	Dmitrii Ignatyev	Yes
2026-07-01 17:17	Email Subscribers & Newsletters <= 5.9.27 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX Action Email Subscribers & Newsletters <= 5.9.27	`CVE-2026-11592`	4.3 Medium	Dmitrii Ignatyev	Yes
2026-06-30 19:07	Qi Blocks <= 1.4.9 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameter Qi Blocks <= 1.4.9	`CVE-2026-10096`	4.3 Medium	Dmitrii Ignatyev	Yes
2026-06-26 00:00	MaxButtons <= 9.8.5 - Reflected Cross-Site Scripting via 'view' Parameter MaxButtons <= 9.8.5	`CVE-2026-13245`	6.1 Medium	Dmitrii Ignatyev	Yes
2026-06-15 21:08	WooCommerce Stripe Payment Gateway <= 10.7.0 - Missing Authorization to Unauthenticated Order Status Manipulation via 'order' Parameter WooCommerce Stripe Payment Gateway <= 10.7.0	`CVE-2026-2381`	6.5 Medium	Dmitrii Ignatyev	Yes
2026-06-12 18:03	Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel <= 3.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_attribute_key' Shortcode Parameter Photo Gallery by FooGallery <= 3.1.31	`CVE-2026-9134`	6.4 Medium	Dmitrii Ignatyev	Yes

Showing 1–10 of 393 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C