István Márton

2022202320242025

Critical

High

Medium

Low

Global Rank

#2

of 3,203 researchers

Vulns

1,004

Critical79

High204

Medium719

Low2

Affected Assets

927

914plugins13themes

Avg CVSS

6.7

Average score of vulnerabilities

Researcher Submissions

1,004 records


2025-11-26 16:19	Tiger <= 101.2.1 - Authenticated (Subscriber+) Privilege Escalation Tiger <= 101.2.1	`CVE-2025-13680`	8.8 High	István Márton	No
2025-11-26 16:16	FindAll Membership <= 1.0.4 - Authentication Bypass via Social Login FindAll Membership <= 1.0.4	`CVE-2025-13539`	9.8 Critical	István Márton	Yes
2025-11-21 07:31	Zegen Core <= 2.0.1 - Cross-Site Request Forgery to Arbitrary File Upload Zegen Core <= 2.0.1	`CVE-2025-11087`	8.8 High	István Márton	Yes
2025-10-30 19:12	WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read WooCommerce Designer Pro <= 1.9.28	`CVE-2025-10897`	8.6 High	István Márton	Yes
2025-10-15 18:07	Felan Framework <= 1.1.4 - Hardcoded Credentials Felan Framework <= 1.1.4	`CVE-2025-10850`	9.8 Critical	István Márton	Yes
2025-10-15 18:07	Felan Framework <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation/Deactivation via process_plugin_actions Felan Framework <= 1.1.4	`CVE-2025-10849`	5.3 Medium	István Márton	Yes
2025-10-15 17:59	Truelysell Core <= 1.8.6 - Unauthenticated Arbitrary User Password Change Truelysell Core <= 1.8.6	`CVE-2025-10742`	9.8 Critical	István Márton	Yes
2025-10-15 17:58	Classified Pro <= 1.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation ClassifiedPro - reCommerce WordPress Th… <= 1.0.14	`CVE-2025-10706`	8.8 High	István Márton	Yes
2025-09-08 17:14	Wilmer Core <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Wilmer Core <= 2.4.5	`CVE-2025-9061`	6.4 Medium	István Márton	Yes
2025-09-08 17:10	Mikado Core <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Mikado Core <= 1.5.2	`CVE-2025-9058`	6.4 Medium	István Márton	Yes

Showing 1–10 of 1,004 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C