← All credits
Krzysztof Zając
418 vulnerability records and advisories credit this contributor.
CVE-2024-3597
Export WP Page to Static HTML/CSS <= 2.2.2 - Open Redirect
CVE-2024-3605
WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection
CVE-2024-3211
Shopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection
CVE-2024-0665
WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting
CVE-2024-2436
Lightweight Accordion <= 1.5.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-7014
Author Box, Guest Author and Co-Authors for Your Posts – Molongui <= 4.7.4 - Information Exposure via ma_debug
CVE-2024-3674
Inline Google Spreadsheet Viewer <= 0.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-4869
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header
CVE-2024-3611
Toolbar Extras for Elementor & More – WordPress Admin Bar Enhanced <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-5205
Videojs HTML5 Player <= 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via videojs_video Shortcode