← All credits
Arkadiusz Hydzik
80 vulnerability records and advisories credit this contributor.
CVE-2024-12209
WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion
CVE-2024-5756
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin
CVE-2024-3269
Download Monitor <= 4.9.13 - Missing Authorization
CVE-2025-2169
WPCS – WordPress Currency Switcher Professional <= 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-11036
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings
CVE-2026-1127
Timeline Event History <= 3.2 - Reflected Cross-Site Scripting
CVE-2024-12417
Simple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode Execution
CVE-2025-0821
Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter
CVE-2024-6028
Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter
CVE-2024-11038
WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form