← All credits
István Márton
471 vulnerability records and advisories credit this contributor.
CVE-2023-2715
Groundhogg <= 2.7.9.8 - Missing Authorization to Admin Account and Ticket Creation
CVE-2023-3051
Page Builder by AZEXO <= 1.27.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-3105
LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
CVE-2024-10341
League of Legends Shortcodes <= 1.0.1 - Authenticated (Contributor+) SQL Injection via Shortcode
CVE-2023-5468
Slick Contact Forms <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-9585
Image Map Pro <= 6.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2023-6924
Photo Gallery by 10Web <= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget
CVE-2024-11133
Eventer <= 3.9.9.5 - Missing Authorization to Unauthenticated Event Ticket Download
CVE-2023-2498
Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-10080
WP Easy Post Types <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta