← All credits
Krzysztof Zając
418 vulnerability records and advisories credit this contributor.
CVE-2025-1489
WP-Appbox <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via appbox Shortcode
CVE-2024-3750
Visualizer: Tables and Charts Manager for WordPress <= 3.10.15 - Missing Authorization to Arbitrary SQL Execution
CVE-2024-1592
Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion
CVE-2024-1285
Page Builder Sandwich <= 5.1.0 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Post Editing
CVE-2025-1509
Show Me The Cookies <= 1.0 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-3984
EmbedSocial – Social Media Feeds, Reviews and Galleries <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-1990
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.1.0 - Authenticated (Contributor+) SQL Injection via Shortcode
CVE-2024-3670
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) <= 3.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-5545
Motors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing Authorization
CVE-2024-3230
Download Attachments <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting