Leonid Semenenko (lsemenenko)

2026

Critical

High

Medium

Low

Global Rank

#350

of 3,238 researchers

Vulns

12

Critical0

High10

Medium2

Low0

Affected Assets

10

9plugins1theme

Avg CVSS

7.6

Average score of vulnerabilities

Researcher Submissions

12 records


2026-07-07 23:19	My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parameters My Calendar <= 3.7.8	`CVE-2026-6854`	7.5 High	Leonid Semenenko (lsemenenko)	Yes
2026-07-06 00:00	AMP for WP <= 1.1.12 - Authenticated (Author+) Arbitrary File Write via Role-Based Access Configuration with Local Font Upload AMP for WP <= 1.1.12	`CVE-2026-6101`	7.5 High	Leonid Semenenko (lsemenenko)	Yes
2026-05-18 00:00	Contest Gallery <= 28.1.6 - Unauthenticated SQL Injection Contest Gallery <= 28.1.6	`CVE-2026-8912`	7.5 High	Leonid Semenenko (lsemenenko)	Yes
2026-05-13 18:03	Motors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' Parameter Motors <= 1.4.107	`CVE-2026-3892`	8.1 High	Leonid Semenenko (lsemenenko)	Yes
2026-05-04 22:35	Betheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack Upload Betheme <= 28.4	`CVE-2026-6261`	8.8 High	Webbernaut	Yes
2026-05-04 21:38	Betheme <= 28.4 - Authenticated (Contributor+) Arbitrary File Deletion via 'mfn-icon-upload' Betheme <= 28.4	`CVE-2026-6262`	6.5 Medium	Webbernaut	Yes
2026-05-01 19:15	Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter Geo Mashup <= 1.13.19	`CVE-2026-6457`	6.5 Medium	Leonid Semenenko (lsemenenko)	Yes
2026-04-17 04:37	Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass Drag and Drop Multiple File Upload for… <= 1.3.9.7	`CVE-2026-5718`	8.1 High	Leonid Semenenko (lsemenenko)	Yes
2026-04-15 21:35	DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages' DirectoryPress <= 3.6.26	`CVE-2026-3489`	7.5 High	Leonid Semenenko (lsemenenko)	Yes
2026-04-10 18:51	wpForo Forum <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion via 'data[body][fileurl]' Parameter wpForo Forum <= 3.0.2	`CVE-2026-5809`	7.1 High	Leonid Semenenko (lsemenenko)	Yes

Showing 1–10 of 12 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C