← All credits
Arkadiusz Hydzik
80 vulnerability records and advisories credit this contributor.
CVE-2025-10488
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move
CVE-2024-5703
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.26 - Missing Authorization
CVE-2024-4845
Icegram Express <= 5.7.22 - Authenticated (Subscriber+) SQL Injection Vulnerability via options[list_id]
CVE-2024-10540
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injection
CVE-2025-7772
Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal <= 16.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
CVE-2024-11012
Notibar – Notification Bar for WordPress <= 2.1.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via njt_nofi_text
CVE-2024-7384
AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function
CVE-2024-12415
AI Infographic Maker <= 4.9.0 - Unauthenticated Arbitrary Shortcode Execution
CVE-2025-10147
Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload
CVE-2024-9654
Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass