← All credits
Krzysztof Zając
418 vulnerability records and advisories credit this contributor.
CVE-2024-1698
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection
CVE-2024-2456
Ecwid Ecommerce Shopping Cart <= 6.12.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-3201
WP DSGVO Tools (GDPR) <= 3.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-6699
WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css
CVE-2024-7501
Download Plugins and Themes from Dashboard <= 1.8.7 - Cross-Site Request Forgery
CVE-2024-2848
Responsive <= 5.0.2 - Missing Authorization to HTML Injection
CVE-2025-1406
Newpost Catch <= 1.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via npc Shortcode
CVE-2024-4324
WP Video Lightbox <= 1.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
CVE-2024-1512
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection
CVE-2024-2950
BoldGrid Easy SEO – Simple and Effective SEO <= 1.6.14 - Information Exposure