← All credits
István Márton
471 vulnerability records and advisories credit this contributor.
CVE-2023-4276
Absolute Privacy <= 2.1 - Cross-Site Request Forgery to User Email/Password Change
CVE-2024-9629
Contact Form 7 + Telegram <= 0.8.5 - Missing Authorization to Authenticated (Subscriber+) Subscription Approve/Pause/Refuse
CVE-2024-13010
WP Foodbakery <= 4.8 - Reflected Cross-Site Scripting
CVE-2023-2781
User Email Verification for WooCommerce <= 3.5.0 - Authentication Bypass
CVE-2024-9863
Miniorange OTP Verification with Firebase <= 3.6.0 - Privilege Escalation via Registration due to Administrator Default User Role Value
CVE-2023-5638
Booster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-2732
MStore API <= 3.9.2 - Authentication Bypass
CVE-2025-4279
External image replace <= 1.0.8 - Authenticated (Contributor+) Arbitrary File Upload
CVE-2023-2082
Buy Me a Coffee – Button and Widget Plugin <= 3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2023-6008
UserPro <= 5.1.1 - Cross-Site Request Forgery via multiple functions