← All credits
István Márton
471 vulnerability records and advisories credit this contributor.
CVE-2023-4520
FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update
CVE-2025-1778
Art Theme <= 3.12.2.3 - Missing Authorization to Authenticated (Subscriber+) Theme Option Delete
CVE-2025-9057
Biagiotti Core <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-0201
Product Expiry for WooCommerce <= 2.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
CVE-2023-4840
MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-12859
BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2024-9932
Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload
CVE-2023-5741
POWR <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-9105
UltimateAI <= 2.8.3 - Authentication Bypass
CVE-2023-5163
Weather Atlas Widget <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode