← All credits
Krzysztof Zając
418 vulnerability records and advisories credit this contributor.
CVE-2023-5884
Word Balloon < 4.20.3 - Avatar Removal via CSRF
CVE-2023-5749
EmbedPress < 3.9.2 - Reflected XSS
CVE-2023-5620
Webpushr < 4.35.0 - Unauthenticated Stored XSS
CVE-2023-5653
WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored XSS
CVE-2023-5609
Seraphinite Accelerator < 2.20.29 - Reflected XSS
CVE-2023-5559
10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion
CVE-2023-5509
myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion
CVE-2024-3934
Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download