elaprendiz1927

elaprendiz1927 is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,012 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Improper Privilege Management, which accounts for 2 of their findings (50%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Missing Authorization. The average CVSS score across these disclosures is 5.9, peaking at 7.5. Severity breakdown: 0 critical and 2 high.

The most affected software includes Forminator Forms (1), Newsletters (1), Nexter Extension (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1012

of 3,823 researchers

Vulns

Critical0

High2

Medium2

Low0

Affected Assets

4plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

4 records


2026-10-15 16:22	Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter Nexter Extension <= 4.7.11	`CVE-2026-111114`	7.5 High	elaprendiz1927	Yes
2026-10-08 17:53	Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.57.3 - Unauthenticated Privilege Escalation Forminator Forms <= 1.57.3	`CVE-2026-96341`	7.3 High	elaprendiz1927	Yes
2026-10-05 09:00	Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg <= 4.7.7 - Missing Authorization Starter Templates <= 4.7.7	`CVE-2026-39721`	4.3 Medium	elaprendiz1927	Yes
2026-09-30 00:00	Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 - Authenticated (Subscriber+) Insecure Direct Object Reference Newsletters <= 1.9.0	`CVE-2026-97074`	4.3 Medium	elaprendiz1927	Yes

Showing 1–4 of 4 reports