← All credits
István Márton
471 vulnerability records and advisories credit this contributor.
CVE-2023-5000
Horizontal scrolling announcements <= 2.4 - Authenticated (Contributor+) SQL Injection via Shortcode
CVE-2023-5506
ImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajax
CVE-2023-5200
flowpaper <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-5577
Bitly's WordPress Plugin <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-5050
Leaflet Map <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-6318
IMGspider <= 2.3.10 - Authenticated (Contributor+) Arbitrary File Upload via 'upload_img_file'
CVE-2023-5742
EasyRotator for WordPress <= 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-6125
Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism
CVE-2025-9112
Doccure <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2023-3055
Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Stored Cross-Site Scripting via azh_save