← All credits
István Márton
471 vulnerability records and advisories credit this contributor.
CVE-2023-5566
Simple Shortcodes <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-5975
ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Plugin Settings Change via ajax
CVE-2024-4346
Startklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File Deletion
CVE-2024-12811
Traveler <= 3.1.9 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2024-11069
WordPress GDPR <= 2.0.2 - Missing Authorization to Unauthenticated Arbitrary User Deletion
CVE-2025-4796
Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover
CVE-2024-9589
Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2024-9862
Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change
CVE-2023-2736
Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Privilege Escalation
CVE-2025-1707
Review Schema <= 2.2.4 - Authenticated (Contributor+) Local File Inclusion via Post Meta