Ivan Kuzymchak

20222023202420252026

Critical

High

Medium

Low

Global Rank

#219

of 3,238 researchers

Vulns

23

Critical1

High3

Medium18

Low1

Affected Assets

15

15plugins

Avg CVSS

5.7

Average score of vulnerabilities

Researcher Submissions

23 records


2026-06-29 16:51	ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite ProfileGrid <= 5.9.9.5	`CVE-2026-12073`	9.8 Critical	Ivan Kuzymchak	Yes
2025-09-10 00:00	Ultimate Classified Listings <= 1.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update Ultimate Classified Listings <= 1.7	`CVE-2025-0763`	4.3 Medium	Ivan Kuzymchak	No
2025-05-18 16:21	All in One SEO Pack <= 4.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Description and Canonical URL All in One SEO <= 4.8.1.1	`CVE-2025-2892`	6.4 Medium	Ivan Kuzymchak	Yes
2025-04-11 00:00	Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter Photo Gallery by 10Web <= 1.8.34	`CVE-2025-2269`	6.1 Medium	Ivan Kuzymchak	Yes
2025-03-21 00:00	ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection ProfileGrid <= 5.9.4.7	`CVE-2025-0723`	6.5 Medium	Ivan Kuzymchak	Yes
2024-12-16 16:25	WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import WP All Import Pro <= 4.9.3	`CVE-2024-9624`	7.6 High	Ivan Kuzymchak	Yes
2024-10-25 00:00	Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by Parameter Poll Maker by AYS <= 5.4.6	`CVE-2024-9475`	4.9 Medium	Ivan Kuzymchak	Yes
2024-10-04 00:00	Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting Fluent Forms <= 5.1.19	`CVE-2024-9528`	4.9 Medium	Ivan Kuzymchak	Yes
2024-09-23 00:00	W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext W3 Total Cache <= 2.7.5	`CVE-2023-5359`	3.7 Low	Ivan Kuzymchak	Yes
2024-05-21 00:00	LuckyWP Table of Contents <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting LuckyWP Table of Contents <= 2.1.4	`CVE-2024-2953`	5.5 Medium	Ivan Kuzymchak	Yes

Showing 1–10 of 23 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C