← All credits
István Márton
471 vulnerability records and advisories credit this contributor.
CVE-2024-9694
CMSMasters Elementor Addon <= 1.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2024-6309
Attachment File Icons (AF Icons) <= 1.3 - Cross-Site Request Forgery to Arbitrary File Upload
CVE-2023-5438
wp image slideshow <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
CVE-2023-2438
UserPro <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdata
CVE-2025-1909
BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth provider
CVE-2023-2448
UserPro <= 5.1.4 - Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_template
CVE-2024-9584
Image Map Pro <= 6.0.20 - Missing Authorization to Authenticated (Contributor+) Map Project Add/Update/Delete
CVE-2025-0856
PGS Core <= 5.8.0 - Missing Authorization via Multiple Functions
CVE-2024-9988
Crypto <= 2.19 - Authentication Bypass via register
CVE-2023-5126
Delete Me <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode