← All credits
Arkadiusz Hydzik
80 vulnerability records and advisories credit this contributor.
CVE-2024-6467
BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation
CVE-2024-10899
WooCommerce Product Table Lite <= 3.8.6 - Unauthenticated Arbitrary Shortcode Execution & Reflected Cross-Site Scripting
CVE-2024-12209
WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion
CVE-2024-5756
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin
CVE-2024-3269
Download Monitor <= 4.9.13 - Missing Authorization
CVE-2025-2169
WPCS – WordPress Currency Switcher Professional <= 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-11036
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings
CVE-2026-1127
Timeline Event History <= 3.2 - Reflected Cross-Site Scripting
CVE-2024-12417
Simple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode Execution
CVE-2025-0821
Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter