Ilkeggs

Ilkeggs is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,125 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2025, with 2 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (100%). The average CVSS score across these disclosures is 6.4, peaking at 6.4.

The most affected software includes Include Fussball.de Widgets (1), Reviews Widgets for Google (1), Vayu Blocks (1), across 3 distinct plugins, themes and core versions in total.

2 of the 3 disclosed issues have a vendor fix, while 1 remain unpatched.

20252026

Critical

High

Medium

Low

Global Rank

#1125

of 3,515 researchers

Vulns

Critical0

High0

Medium3

Low0

Affected Assets

3plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

3 records


2026-07-02 12:00	Reviews Widgets for Google, Yelp & TripAdvisor <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_id' Shortcode Attribute Reviews Widgets for Google <= 2.7.3	`CVE-2026-12154`	6.4 Medium	Ilkeggs	Yes
2025-11-10 15:26	Include fussball.de Widgets <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'api' and 'type' Include Fussball.de Widgets <= 4.0.0	`CVE-2025-11129`	6.4 Medium	stealthcopter	No
2025-09-02 00:00	Vayu Blocks <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Block Attributes Vayu Blocks <= 1.3.9	`CVE-2025-9378`	6.4 Medium	stealthcopter	Yes

Showing 1–3 of 3 reports