← All credits
Krzysztof Zając
418 vulnerability records and advisories credit this contributor.
CVE-2024-2031
Video Conferencing with Zoom <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-3585
Send PDF for Contact Form 7 <= 1.0.2.3 - Missing Authorization
CVE-2024-3648
ShareThis Share Buttons <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via sharethis-inline-buttons Shortcode
CVE-2025-1463
Spreadsheet Integration <= 3.8.2 - Cross-Site Request Forgery to Arbitrary Post Publish
CVE-2023-6962
WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description
CVE-2024-5141
Rotating Tweets (Twitter widget and shortcode) <= 1.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-2691
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcode
CVE-2023-5905
DeMomentSomTres WordPress Export Posts With Images <= 20220825 - Subscriber+ unauthorized data export
CVE-2022-0775
WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion
CVE-2021-25022
UpdraftPlus < 1.16.66 - Reflected Cross-Site Scripting