lilmingwa13

lilmingwa13 is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #946 of 3,515 contributors. The disclosure was published in 2026.

Their research concentrates on Server-Side Request Forgery (SSRF), which accounts for 2 of their findings (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization. The average CVSS score across these disclosures is 5.3, peaking at 6.4.

The most affected software includes Contest Gallery (2), PublishPress Revisions (1), Smart Auto Upload Images (1), across 3 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#946

of 3,515 researchers

Vulns

Critical0

High0

Medium4

Low0

Affected Assets

3plugins

Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

4 records


2026-03-10 00:00	Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery Contest Gallery <= 28.1.2.1	`CVE-2026-24964`	6.4 Medium	lilmingwa13	Yes
2026-01-29 00:00	PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.7.22 - Cross-Site Request Forgery PublishPress Revisions <= 3.7.22	`CVE-2026-25322`	4.3 Medium	lilmingwa13	Yes
2026-01-09 00:00	Contest Gallery <= 28.1.1 - Missing Authorization Contest Gallery <= 28.1.1	`CVE-2026-24965`	4.3 Medium	lilmingwa13	Yes
2026-01-03 00:00	Smart Auto Upload Images – Import External Images <= 1.2.2 - Authenticated (Contributor+) Server-Side Request Forgery Smart Auto Upload Images <= 1.2.2	`CVE-2026-23803`	6.4 Medium	lilmingwa13	Yes

Showing 1–4 of 4 reports