vodanh

vodanh is a security researcher credited with 7 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #605 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on SQL Injection, which accounts for 2 of their findings (29%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Cross-Site Scripting. The average CVSS score across these disclosures is 5.9, peaking at 7.2. Severity breakdown: 0 critical and 2 high.

The most affected software includes Mail Mint (3), Demo Import Kit (1), Mega Forms (1), across 5 distinct plugins, themes and core versions in total.

5 of the 7 disclosed issues have a vendor fix, while 2 remain unpatched.

2025

Critical

High

Medium

Low

Global Rank

#605

of 3,515 researchers

Vulns

Critical0

High2

Medium5

Low0

Affected Assets

5plugins

Avg CVSS

5.9

Average score of vulnerabilities

Researcher Submissions

7 records


2025-11-07 21:08	Mail Mint <= 1.18.10 - Authenticated (Admin+) Arbitrary File Upload Mail Mint <= 1.18.10	`CVE-2025-11967`	7.2 High	vodanh	Yes
2025-11-07 15:07	WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal WPFunnels <= 3.6.2	`CVE-2025-12000`	6.5 Medium	vodanh	Yes
2025-10-14 19:38	Demo Import Kit <= 1.1.0 - Authenticated (Admin+) Arbitrary File Upload Demo Import Kit <= 1.1.0	`CVE-2025-10051`	7.2 High	vodanh	No
2025-09-22 00:00	VoucherPress <= 1.5.7 - Authenticated (Author+) Stored Cross-Site Scripting VoucherPress <= 1.5.7	`CVE-2025-58223`	6.4 Medium	vodanh	No
2025-09-22 00:00	Mail Mint <= 1.18.6 - Authenticated (Administrator+) SQL Injection Mail Mint <= 1.18.6	`CVE-2025-59570`	4.9 Medium	vodanh	Yes
2025-09-03 00:00	Mail Mint <= 1.18.5 - Authenticated (Administrator+) SQL Injection Mail Mint <= 1.18.5	`CVE-2025-58604`	4.9 Medium	vodanh	Yes
2025-09-03 00:00	Contact Form By Mega Forms <= 1.6.1 - Missing Authorization Mega Forms <= 1.6.1	`CVE-2025-58639`	4.3 Medium	vodanh	Yes

Showing 1–7 of 7 reports