← All credits
zakaria
129 vulnerability records and advisories credit this contributor.
CVE-2024-13542
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-11431
Ragic Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-11427
Catch Popup <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-11805
Skip to Timestamp <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-11813
Responsive iframe GoogleMap <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2026-1853
BuddyHolis ListSearch <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'placeholder' Shortcode Attribute
CVE-2026-2496
Ed's Font Awesome <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2025-1560
WOW Entrance Effects (WEE!) <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-14110
WP Js List Pages Shortcodes <= 1.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute
CVE-2025-11768
Islamic Phrases <= 2.12.2015 - Authenticated (Contributor+) Stored Cross-Site Scripting