Arkadiusz Hydzik

202420252026

Critical

High

Medium

Low

Global Rank

#82

of 3,238 researchers

Vulns

80

Critical9

High33

Medium36

Low2

Affected Assets

64

64plugins

Avg CVSS

7.2

Average score of vulnerabilities

Researcher Submissions

80 records


2026-01-24 02:47	Save as PDF Plugin by PDFCrowd <= 4.5.5 - Reflected Cross-Site Scripting via options Save as PDF Plugin by PDFCrowd <= 4.5.5	`CVE-2026-0862`	6.1 Medium	Arkadiusz Hydzik	Yes
2026-01-23 20:32	Timeline Event History <= 3.2 - Reflected Cross-Site Scripting Timeline Event History <= 3.2	`CVE-2026-1127`	6.1 Medium	Arkadiusz Hydzik	No
2025-12-15 02:25	LearnPress – WordPress LMS Plugin <= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_social LearnPress <= 4.3.1	`CVE-2025-14387`	6.4 Medium	Arkadiusz Hydzik	Yes
2025-10-24 17:34	Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move Directorist <= 8.4.8	`CVE-2025-10488`	8.1 High	Arkadiusz Hydzik	Yes
2025-09-22 00:00	Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload Podlove Podcast Publisher <= 4.2.6	`CVE-2025-10147`	9.8 Critical	Arkadiusz Hydzik	Yes
2025-09-16 17:10	WP Import – Ultimate CSV XML Importer for WordPress 7.20 - 7.28 - Authenticated (Subscriber+) Remote Code Execution via Code Injection WP Ultimate CSV Importer 7.20 – 7.28	`CVE-2025-10057`	8.8 High	Arkadiusz Hydzik	Yes
2025-09-16 17:09	WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Authenticated (Subscriber+) Arbitrary File Deletion WP Ultimate CSV Importer <= 7.27	`CVE-2025-10058`	8.1 High	Arkadiusz Hydzik	Yes
2025-09-10 19:03	My WP Translate <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update My WP Translate <= 1.1	`CVE-2025-8425`	8.8 High	Arkadiusz Hydzik	No
2025-09-10 19:03	My WP Translate <= 1.1 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Option Read and Deletion My WP Translate <= 1.1	`CVE-2025-8423`	5.4 Medium	Arkadiusz Hydzik	No
2025-09-09 17:59	WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure WP Ultimate CSV Importer <= 7.27	`CVE-2025-10040`	7.7 High	Arkadiusz Hydzik	Yes

Showing 1–10 of 80 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C