Ihsan Sencan

Ihsan Sencan is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #390 of 3,515 contributors. Their disclosures were published between 2017 and 2026. The most productive year was 2017, with 8 findings.

Their research concentrates on SQL Injection, which accounts for 8 of their findings (73%). Other recurring categories include Path Traversal. The average CVSS score across these disclosures is 8.5, peaking at 9.8. Severity breakdown: 1 critical and 10 high.

The most affected software includes apptha-slider-gallery (2), Hospital Management System for Wordpress (1), Mac Photo Gallery (1), across 10 distinct plugins, themes and core versions in total.

4 of the 11 disclosed issues have a vendor fix, while 7 remain unpatched. The most severe finding, "PICA Photo Gallery <= 1.0 - SQL Injection", scores 9.8 out of 10.

2017201820192020202120222023202420252026

Critical

High

Medium

Low

Global Rank

#390

of 3,515 researchers

Vulns

Critical1

High10

Medium0

Low0

Affected Assets

9plugins1theme

Avg CVSS

8.5

Average score of vulnerabilities

Researcher Submissions

11 records


2026-06-09 00:00	Apptha Slider Gallery <= 1.0 - Unauthenticated Arbitrary File Download apptha-slider-gallery <= 1.0	`CVE-2017-20248`	7.5 High	Ihsan Sencan	No
2026-06-09 00:00	Mac Photo Gallery <= 3.0 - Unauthenticated Arbitrary File Deletion Mac Photo Gallery <= 3.0	`CVE-2017-20250`	7.5 High	Ihsan Sencan	No
2026-06-09 00:00	Apptha Slider Gallery <= 1.0 - Unauthenticated SQL Injection apptha-slider-gallery <= 1.0	`CVE-2017-20249`	7.5 High	Ihsan Sencan	No
2017-09-26 00:00	WPAMS - Apartment Management System for wordpress Theme < 17-07-2019 - SQL Injection WPAMS - Apartment Management System… < 17-07-2019	`CVE-2017-14847`	8.8 High	Ihsan Sencan	Yes
2017-09-26 00:00	SMSmaster – Multipurpose SMS Gateway for Wordpress (All Versions) - Authenticated SQL Injection SMSmaster *	`CVE-2017-14842`	8.8 High	Ihsan Sencan	No
2017-09-26 00:00	WPCHURCH - Church Management System for Wordpress Theme < 13-07-2019 - SQL Injection WPCHURCH - Church Management System… < 13-07-2019	`CVE-2017-14845`	8.8 High	Ihsan Sencan	Yes
2017-09-26 00:00	Mojoomla School Management System (Unspecified Version) - Authenticated (Student+) SQL Injection School Management System for Wordpress *	`CVE-2017-14843`	8.8 High	Ihsan Sencan	No
2017-09-26 00:00	Mojoomla Hospital Management System for WordPress Theme < 22-05-2018 - SQL Injection Hospital Management System for Wordpress <= 08-03-2018	`CVE-2017-14846`	8.8 High	Ihsan Sencan	Yes
2017-09-26 00:00	WPGYM - Wordpress Gym Management System (Unknown Version) - SQL Injection WPGYM - Wordpress Gym Management System *	`CVE-2017-14844`	8.8 High	Ihsan Sencan	No
2017-09-09 00:00	WPHRM - Human Resource Management System < 1.1 - SQL Injection WPHRM < 1.1	`CVE-2017-14848`	8.8 High	Ihsan Sencan	Yes

Showing 1–10 of 11 reports