VanTastic

VanTastic is a security researcher credited with 31 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #201 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Deserialization Of Untrusted Data, which accounts for 7 of their findings (23%). Other recurring categories include Cross-Site Scripting, Missing Authorization. The average CVSS score across these disclosures is 6.9, peaking at 9.8. Severity breakdown: 2 critical and 18 high.

The most affected software includes JetEngine (4), Kirki (3), Dokan Pro (2), across 24 distinct plugins, themes and core versions in total.

28 of the 31 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "Dokan Pro <= 5.0.4 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#201

of 3,823 researchers

Vulns

31

Critical2
High18
Medium11
Low0
Affected Assets

24

23plugins1theme
Avg CVSS

6.9

Average score of vulnerabilities

Researcher Submissions

31 records
2026-09-01 00:00CVE-2026-81283
7.5
High
VanTasticYes
2026-08-24 07:47CVE-2026-28167
7.5
High
VanTasticNo
2026-08-20 00:00CVE-2026-28165
7.3
High
VanTasticNo
2026-08-17 12:49CVE-2026-73339
7.5
High
VanTasticYes
2026-08-13 00:00CVE-2026-28173
4.3
Medium
VanTasticYes
2026-08-13 00:00CVE-2026-28174
4.3
Medium
VanTasticYes
2026-08-13 00:00CVE-2026-28189
9.1
Critical
VanTasticYes
2026-08-10 00:00CVE-2026-66691
5.3
Medium
VanTasticYes
2026-07-28 00:00CVE-2026-65509
7.2
High
VanTasticYes
2026-07-23 00:00CVE-2026-65495
5.3
Medium
VanTasticNo
Showing 1–10 of 31 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C