← All credits
Krzysztof Zając
418 vulnerability records and advisories credit this contributor.
CVE-2024-1446
NextScripts: Social Networks Auto-Poster <= 4.4.3 - Cross-Site Request Forgery to Arbitrary Post Deletion
CVE-2024-2423
UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-3678
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure
CVE-2024-2845
BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer For Elementor & Gutenberg <= 3.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-2337
Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-1642
MainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulk
CVE-2024-2079
WPBakery Page Builder Addons by Livemesh <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-13560
Subscriptions & Memberships for PayPal <= 1.1.6 - Cross-Site Request Forgery to Arbitrary Post Deletion
CVE-2024-1857
Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates <= 2.6.6 - Missing Authorization to Unauthenticated Information Exposure
CVE-2024-1383
WPvivid Backup for MainWP <= 0.9.32 - Reflected Cross-Site Scripting