← All credits
Krzysztof Zając
418 vulnerability records and advisories credit this contributor.
CVE-2024-13447
WP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval
CVE-2024-5224
Easy Social Like Box – Popup – Sidebar Widget <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-8623
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-2325
Link Library <= 7.6.6 - Reflected Cross-Site Scripting
CVE-2023-6981
WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
CVE-2024-1379
Website Article Monetization By MageNet <= 1.0.11 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-1320
teachPress <= 9.0.9 - Cross-Site Request Forgery to Import Delete
CVE-2024-1769
JM Twitter Cards <= 14 - Information Exposure via Meta Description
CVE-2024-3672
BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-1516
WP eCommerce <= 3.15.1 - Missing Authorization to Unauthenticated Arbitrary Post Creation