← All credits
Krzysztof Zając
418 vulnerability records and advisories credit this contributor.
CVE-2024-3342
Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection
CVE-2023-6980
WP SMS <= 6.5 - Cross-Site Request Forgery to Subscriber Deletion
CVE-2024-2542
Jotform Online Forms <= 1.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-0908
Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page <= 1.13.4 - Missing Authorization to Information Disclosure
CVE-2024-8624
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection
CVE-2024-1381
Page Builder Sandwich – Front End WordPress Page Builder Plugin <= 5.1.0 - Sensitive Information Exposure
CVE-2024-4356
List categories <= 0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-3312
Easy Custom Auto Excerpt <= 2.4.12 - Sensitive Information Exposure
CVE-2024-13785
Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Execution
CVE-2024-3228
Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosure