Dmitrii Ignatyev

Dmitrii Ignatyev is a security researcher credited with 409 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #17 of 3,515 contributors. Their disclosures were published between 2023 and 2026. The most productive year was 2024, with 170 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 257 of their findings (63%). Other recurring categories include Missing Authorization, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 5.4, peaking at 9.8. Severity breakdown: 6 critical and 28 high.

The most affected software includes Email Subscribers & Newsletters (8), Shortcodes Ultimate (8), Form Maker by 10Web (7), across 251 distinct plugins, themes and core versions in total.

401 of the 409 disclosed issues have a vendor fix, while 8 remain unpatched. The most severe finding, "JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing", scores 9.8 out of 10.