← All credits
István Márton
471 vulnerability records and advisories credit this contributor.
CVE-2025-10742
Truelysell Core <= 1.8.6 - Unauthenticated Arbitrary User Password Change
CVE-2024-5149
BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness
CVE-2023-3052
Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Post Creation/Modification/Deletion
CVE-2023-4796
Booster for WooCommerce <= 7.1.0 - Authenticated (Subscriber+) Information Disclosure via Shortcode
CVE-2023-3714
ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalation
CVE-2025-0748
Homey <= 2.4.3 - Cross-Site Request Forgery to User Verification
CVE-2024-7485
Traffic Manager <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-3729
Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation
CVE-2023-5233
Font Awesome Integration <= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-5792
Houzez CRM <= 1.4.2 - Authenticated (Seller+) SQL Injection