← All credits
István Márton
471 vulnerability records and advisories credit this contributor.
CVE-2024-11135
Eventer <= 3.9.8 - Unauthenticated SQL Injection via eventer_get_attendees
CVE-2023-5666
Accordion <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-13539
FindAll Membership <= 1.0.4 - Authentication Bypass via Social Login
CVE-2024-5204
Swiss Toolkit For WP <= 1.0.7 - Authenticated (Contributor+) Authentication Bypass
CVE-2023-6925
Unlimited Addons for WPBakery Page Builder <= 1.0.42 - Authenticated (Editor+) Arbitrary File Upload
CVE-2023-5507
ImageMapper <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-5049
Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-2305
Download Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-9821
Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass
CVE-2023-5250
Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode