← All credits
Friderika Baranyai
64 vulnerability records and advisories credit this contributor.
CVE-2025-1515
WP Real Estate Manager <= 2.8 - Authentication Bypass via Account Takeover
CVE-2025-7444
LoginPress Pro <= 5.0.1 - Authentication Bypass via WordPress.com OAuth provider
CVE-2025-6553
Ovatheme Events Manager <= 1.8.5 - Unauthenticated Arbitrary File Upload
CVE-2025-5948
Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business
CVE-2026-1492
User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
CVE-2025-2780
Woffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-12213
WP Job Board Pro < 1.2.85 - Unauthenticated Privilege Escalation via process_register
CVE-2025-4391
Echo RSS Feed Post Generator <= 5.4.8.1 - Unauthenticated Arbitrary File Upload
CVE-2024-4258
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Unauthenticated Local File Inclusion
CVE-2025-6080
WPGYM <= 67.7.0 - Missing Authorization to Admin Account Creation