ibrahimsql

ibrahimsql is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #491 of 3,515 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 5 of their findings (56%). Other recurring categories include Deserialization Of Untrusted Data, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 5.8, peaking at 8.1. Severity breakdown: 0 critical and 2 high.

The most affected software includes Adminify (1), Frontend File Manager Plugin (1), Gutena Forms (1), across 9 distinct plugins, themes and core versions in total.

6 of the 9 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "Super Stage WP <= 1.0.1 - Unauthenticated PHP Object Injection", scores 8.1 out of 10.

2026

Critical

High

Medium

Low

Global Rank

#491

of 3,515 researchers

Vulns

Critical0

High2

Medium7

Low0

Affected Assets

9plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

9 records


2026-04-07 00:00	Link Whisper Free < 0.9.1 - Missing Authorization to Unauthenticated Settings Change Link Whisper Free < 0.9.1	`CVE-2026-1900`	5.3 Medium	ibrahimsql	Yes
2026-03-30 00:00	LeadConnector < 3.0.22 - Missing Authorization LeadConnector < 3.0.22	`CVE-2026-1890`	5.3 Medium	ibrahimsql	Yes
2026-03-12 00:00	Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder < 1.6.1 - Missing Authorization to Authenticated (Contributor+) Settings Update Gutena Forms < 1.6.1	`CVE-2026-1753`	4.3 Medium	ibrahimsql	Yes
2026-03-05 00:00	Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more < 1.19.5 - Unauthenticated Information Disclosure Mail Mint < 1.19.5	`CVE-2026-2025`	5.3 Medium	ibrahimsql	Yes
2026-03-02 00:00	Super Stage WP <= 1.0.1 - Unauthenticated PHP Object Injection Super Stage WP <= 1.0.1	`CVE-2026-1542`	8.1 High	ibrahimsql	No
2026-02-19 00:00	Video Conferencing with Zoom < 4.6.6 - Missing Authorization Video Conferencing with Zoom < 4.6.6	`CVE-2026-1368`	5.3 Medium	ibrahimsql	Yes
2026-02-17 00:00	Frontend File Manager <= 23.5 - Missing Authorization Frontend File Manager Plugin <= 23.5	`CVE-2026-0829`	5.3 Medium	ibrahimsql	No
2026-01-27 00:00	WP Adminify <= 4.0.7.7 - Unauthenticated Sensitive Information Exposure via 'get-addons-list' REST API Adminify <= 4.0.7.7	`CVE-2026-1060`	5.3 Medium	ibrahimsql	Yes
2026-01-21 00:00	eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection WP eCommerce <= 3.15.1	`CVE-2026-1235`	8.1 High	ibrahimsql	No

Showing 1–9 of 9 reports