dodoh4t

dodoh4t is a security researcher credited with 53 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #120 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 13 of their findings (25%). Other recurring categories include Cross-Site Scripting, SQL Injection. The average CVSS score across these disclosures is 6.1, peaking at 9.8. Severity breakdown: 2 critical and 11 high.

The most affected software includes Accept Stripe Payments (1), Advanced 301 and 302 Redirect (1), Affiliates Manager (1), across 53 distinct plugins, themes and core versions in total.

47 of the 53 disclosed issues have a vendor fix, while 6 remain unpatched. The most severe finding, "Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.5.0 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#120

of 3,823 researchers

Vulns

53

Critical2
High11
Medium39
Low1
Affected Assets

53

53plugins
Avg CVSS

6.1

Average score of vulnerabilities

Researcher Submissions

53 records
2026-10-05 16:31CVE-2026-39767
6.5
Medium
dodoh4tNo
2026-10-05 13:29CVE-2026-39724
7.2
High
dodoh4tNo
2026-10-05 12:25CVE-2026-39745
7.2
High
dodoh4tNo
2026-10-04 08:33CVE-2026-32581
6.5
Medium
dodoh4tNo
2026-09-23 10:42CVE-2026-94498
5.3
Medium
dodoh4tYes
2026-09-09 00:00CVE-2026-81782
6.4
Medium
dodoh4tNo
2026-09-08 00:00CVE-2026-81275
6.5
Medium
dodoh4tNo
2026-08-11 00:00CVE-2026-66660
5.3
Medium
dodoh4tYes
2026-07-23 00:00CVE-2026-59531
5.3
Medium
dodoh4tYes
2026-07-23 00:00CVE-2026-59532
5.3
Medium
dodoh4tYes
Showing 1–10 of 53 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C