← All credits
István Márton
471 vulnerability records and advisories credit this contributor.
CVE-2024-5871
WooCommerce - Social Login <= 2.6.2 - Unauthenticated PHP Object Injection
CVE-2023-4889
Shareaholic <= 9.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-3808
Porto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2023-5125
Contact Form by FormGet <= 5.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-2519
Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Download
CVE-2023-5744
Very Simple Google Maps <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-1717
Login Me Now <= 1.7.2 - Authentication Bypass
CVE-2023-2497
UserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object Injection
CVE-2025-1777
BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via ux_cb_page_options_save
CVE-2023-4774
WP-Matomo Integration (WP-Piwik) <= 1.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode