← All credits
Krzysztof Zając
418 vulnerability records and advisories credit this contributor.
CVE-2023-6961
WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header
CVE-2024-3604
OSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) SQL Injection
CVE-2023-6978
WP Job Manager – Company Profiles <= 1.7 - Reflected Cross-Site Scripting
CVE-2024-3726
Login Logout Register Menu <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'llrmloginlogout' Shortcode
CVE-2024-4355
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 10.23 - Missing Authorization to Information Expsoure
CVE-2024-4997
WPUpper Share Buttons <= 3.43 - Missing Authorization
CVE-2025-1322
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Protected Post Disclosure
CVE-2024-4273
Essential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-3564
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2024-2030
Database for Contact Form 7, WPforms, Elementor forms <= 1.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode