Wordfence Intelligence > Vulnerability Researchers > ibrahimsql

ibrahimsql

446

All Time Ranking

All Time Discoveries

90 Day Published Submissions

27 Jan '26

Last Published Submission

About

Hi, I'm İbrahim! Also known as ibrahimsql, I'm a passionate Cyber Security Engineer, Pentester, and Ethical Hacker. I specialize in offensive security, focusing on uncovering vulnerabilities and strengthening systems through creative problem-solving. My journey revolves around exploring the depths of cybersecurity, building custom tools, and constantly learning new techniques. I thrive on challenging myself with complex security scenarios, whether it's breaking into systems ethically or crafting

1 Achievement

Learn more about Achievements

Learn more Learn more about Achievements

9 Vulnerabilities

Link Whisper Free < 0.9.1 - Missing Authorization to Unauthenticated Settings Change

5.3

CVE-2026-1900

Apr 7, 2026

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

LeadConnector < 3.0.22 - Missing Authorization

5.3

CVE-2026-1890

Mar 30, 2026

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder < 1.6.1 - Missing Authorization to Authenticated (Contributor+) Settings Update

4.3

CVE-2026-1753

Mar 12, 2026

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more < 1.19.5 - Unauthenticated Information Disclosure

5.3

CVE-2026-2025

Mar 5, 2026

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Super Stage WP <= 1.0.1 - Unauthenticated PHP Object Injection

8.1

CVE-2026-1542

Mar 2, 2026

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Video Conferencing with Zoom < 4.6.6 - Missing Authorization

5.3

CVE-2026-1368

Feb 19, 2026

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Frontend File Manager <= 23.5 - Missing Authorization

5.3

CVE-2026-0829

Feb 17, 2026

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

WP Adminify <= 4.0.7.7 - Unauthenticated Sensitive Information Exposure via 'get-addons-list' REST API

5.3

CVE-2026-1060

Jan 27, 2026

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection

8.1

CVE-2026-1235

Jan 21, 2026

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Title	CVE ID	CVSS	Vector	Date
Link Whisper Free < 0.9.1 - Missing Authorization to Unauthenticated Settings Change	CVE-2026-1900	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	April 7, 2026
LeadConnector < 3.0.22 - Missing Authorization	CVE-2026-1890	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	March 30, 2026
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder < 1.6.1 - Missing Authorization to Authenticated (Contributor+) Settings Update	CVE-2026-1753	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	March 12, 2026
Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more < 1.19.5 - Unauthenticated Information Disclosure	CVE-2026-2025	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	March 5, 2026
Super Stage WP <= 1.0.1 - Unauthenticated PHP Object Injection	CVE-2026-1542	8.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	March 2, 2026
Video Conferencing with Zoom < 4.6.6 - Missing Authorization	CVE-2026-1368	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	February 19, 2026
Frontend File Manager <= 23.5 - Missing Authorization	CVE-2026-0829	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	February 17, 2026
WP Adminify <= 4.0.7.7 - Unauthenticated Sensitive Information Exposure via 'get-addons-list' REST API	CVE-2026-1060	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	January 27, 2026
eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection	CVE-2026-1235	8.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	January 21, 2026

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation