← All credits
zakaria
129 vulnerability records and advisories credit this contributor.
CVE-2025-11807
Mixlr Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2026-1851
iVysilani Shortcode <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute
CVE-2024-11750
ONLYOFFICE DocSpace <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-12652
Ungapped Widgets <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-12820
MK Google Directions <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2026-4077
Ecover Builder For Dummies <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
CVE-2024-12493
Files Download Delay <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-11765
Stock Tools <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-14143
Ayo Shortcodes <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute
CVE-2025-11822
WP Bootstrap Tabs <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode