← All credits
István Márton
471 vulnerability records and advisories credit this contributor.
CVE-2025-0855
PGS Core <= 5.8.0 - Unauthenticated PHP Object Injection
CVE-2023-5085
Advanced Menu Widget <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-6449
Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File Upload
CVE-2024-10002
Rover IDX <= 3.0.0.2905 - Authenticated (Subscriber+) Authentication Bypass to Administrator
CVE-2024-8911
LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection
CVE-2023-2436
Blog-in-Blog <= 2.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-2304
Favorites <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-5793
Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection
CVE-2023-5127
WP Font Awesome <= 1.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-6187
Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload