← All credits
Krzysztof Zając
418 vulnerability records and advisories credit this contributor.
CVE-2024-3275
eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure
CVE-2024-8476
Easy PayPal Events <= 1.2.1 - Cross-Site Request Forgery to Arbitrary Post Deletion
CVE-2024-8548
KB Support – WordPress Help Desk and Knowledge Base <= 1.6.6 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions
CVE-2024-3615
Media Library Folders <= 8.2.0 - Reflected Cross-Site Scripting via 's'
CVE-2024-5543
Slideshow Gallery LITE <= 1.8.1 - Authenticated (Contributor+) SQL Injection
CVE-2024-2107
Blossom Spa <= 1.3.3 - Sensitive Information Exposure
CVE-2024-8622
amCharts: Charts and Maps <= 1.4.4 - Reflected Cross-Site Scripting via Cross-Site Request Forgery
CVE-2024-0592
Related Posts for WordPress <= 2.2.1 - Cross-Site Request Forgery
CVE-2024-5431
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode
CVE-2024-3732
GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode