Ivan Cese

20252026

Critical

High

Medium

Low

Global Rank

#177

of 3,238 researchers

Vulns

31

Critical0

High6

Medium25

Low0

Affected Assets

28

28plugins

Avg CVSS

5.6

Average score of vulnerabilities

Researcher Submissions

31 records


2026-04-15 18:53	Career Section <= 1.6 - Cross-Site Request Forgery to Arbitrary File Deletion Career Section <= 1.6	`CVE-2025-14868`	8.8 High	Ivan Cese	Yes
2026-02-06 20:26	The Bucketlister <= 0.1.5 - Missing Authorization to Authenticated (Subscriber+) Bucket List Modification The Bucketlister <= 0.1.5	`CVE-2025-15476`	4.3 Medium	Ivan Cese	No
2026-02-06 20:26	The Bucketlister <= 0.1.5 - Authenticated (Contributor+) SQL Injection via `category` and `id` Shortcode Attributes The Bucketlister <= 0.1.5	`CVE-2025-15477`	6.5 Medium	Ivan Cese	No
2026-02-05 18:34	WaveSurfer-WP <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'src' Shortcode Attribute WaveSurfer-WP <= 2.8.3	`CVE-2026-1909`	6.4 Medium	Ivan Cese	Yes
2026-01-13 17:19	GetContentFromURL <= 1.0 - Authenticated (Contributor+) Server-Side Request Forgery via 'url' Shortcode Attribute GetContentFromURL <= 1.0	`CVE-2025-14613`	7.2 High	Ivan Cese	No
2026-01-13 16:44	PDF Resume Parser <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentials PDF Resume Parser <= 1.0	`CVE-2025-14464`	5.3 Medium	Ivan Cese	No
2026-01-06 20:30	AA Block country <= 1.0.1 - Unauthenticated IP Address Spoofing via X-Forwarded-For Header AA Block country <= 1.0.1	`CVE-2025-13694`	5.3 Medium	Ivan Cese	No
2025-12-12 16:11	Shortcode Loader <= 1.0 - Unauthenticated Arbitrary Shortcode Execution via 'code' Parameter Shortcode Ajax <= 1.0	`CVE-2025-14539`	5.4 Medium	Ivan Cese	No
2025-12-12 16:09	Solutions Ad Manager <= 1.0.0 - Unauthenticated Open Redirect via 'sam-redirect-to' Parameter Solutions Ad Manager <= 1.0.0	`CVE-2025-14451`	4.7 Medium	Ivan Cese	No
2025-12-11 19:26	Simple CSV Table <= 1.0.1 - Directory Traversal to Authenticated (Contributor+) Arbitrary File Read Simple CSV Table <= 1.0.1	`CVE-2025-12960`	6.5 Medium	Ivan Cese	Yes

Showing 1–10 of 31 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C