← All credits
Krzysztof Zając
418 vulnerability records and advisories credit this contributor.
CVE-2024-2842
Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-5601
Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode
CVE-2024-3287
SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer <= 3.10.2 - Missing Authorization
CVE-2024-13637
Demo Awesome <= 1.0.3 - Missing Authorization to Authenticated (Subscriber+) Plugin Activation
CVE-2024-1385
WP-Stateless – Google Cloud Storage <= 3.4.0 - Missing Authorization to Limited Arbitrary Options Update
CVE-2024-0617
Category Discount Woocommerce <= 4.12 - Missing Authorization via wpcd_save_discount()
CVE-2025-1510
Custom Post Type Date Archives <= 2.7.1 - Missing Authorization to Unauthenticated Arbitrary Shortcode Execution
CVE-2024-4443
Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter
CVE-2024-13743
Wonder Video Embed <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-0609
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting