dyingman

dyingman is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,172 of 3,333 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 2 of their findings (67%). Other recurring categories include Authorization Bypass Through User-Controlled Key. The average CVSS score across these disclosures is 4.3, peaking at 4.3.

The most affected software includes Product Specifications for Woocommerce (1), RealHomes Memberships (1), Static Block (1), across 3 distinct plugins, themes and core versions in total.

2 of the 3 disclosed issues have a vendor fix, while 1 remain unpatched.

2026

Critical

High

Medium

Low

Global Rank

#1172

of 3,333 researchers

Vulns

Critical0

High0

Medium3

Low0

Affected Assets

3plugins

Avg CVSS

4.3

Average score of vulnerabilities

Researcher Submissions

3 records


2026-07-31 19:49	RealHomes Memberships <= 3.0.9 - Missing Authorization to Authenticated (Subscriber+) Membership Payment Bypass via 'ims_add_paypal_recurring_membership' AJAX Action RealHomes Memberships <= 3.0.9	`CVE-2026-10782`	4.3 Medium	dyingman	Yes
2026-06-26 17:56	Product Specifications for Woocommerce <= 0.8.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attribute/Group Creation, Modification, and Deletion via 'dwps_modify_groups' and 'dwps_modify_attributes' AJAX Actions Product Specifications for Woocommerce <= 0.8.9	`CVE-2026-11364`	4.3 Medium	dyingman	Yes
2026-06-15 16:26	Static Block <= 2.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode 'id' Attribute Static Block <= 2.2	`CVE-2026-10780`	4.3 Medium	dyingman	No

Showing 1–3 of 3 reports