Krzysztof Zając

202120222023202420252026

Critical

High

Medium

Low

Global Rank

#13

of 3,248 researchers

Vulns

464

Critical34

High87

Medium343

Low0

Affected Assets

374

369plugins5themes

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

464 records


2026-03-20 15:21	Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.4 - Unauthenticated Blind Arbitrary Shortcode Execution Contact Form <= 1.7.4	`CVE-2024-13785`	5.6 Medium	Krzysztof Zając	Yes
2025-04-01 20:30	Demo Awesome <= 1.0.3 - Missing Authorization to Authenticated (Subscriber+) Plugin Activation Demo Awesome <= 1.0.3	`CVE-2024-13637`	6.5 Medium	Krzysztof Zając	No
2025-03-25 14:11	Smart Maintenance Mode <= 1.5.2 - Reflected Cross-Site Scripting via setstatus Parameter Smart Maintenance Mode <= 1.5.2	`CVE-2025-1490`	6.1 Medium	Krzysztof Zając	Yes
2025-03-24 18:00	teachPress <= 9.0.9 - Cross-Site Request Forgery to Import Delete teachPress <= 9.0.9	`CVE-2025-1320`	4.3 Medium	Krzysztof Zając	Yes
2025-03-11 14:22	WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download WP Crowdfunding <= 2.1.14	`CVE-2025-1508`	5.3 Medium	Krzysztof Zając	Yes
2025-03-07 20:57	WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL Injection WP-Recall <= 16.26.10	`CVE-2025-1323`	7.5 High	Krzysztof Zając	Yes
2025-03-07 20:52	WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Exeuction WP-Recall <= 16.26.10	`CVE-2025-1325`	6.3 Medium	Krzysztof Zając	Yes
2025-03-07 14:16	Shortcode Cleaner Lite <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Export Shortcode Cleaner Lite <= 1.0.9	`CVE-2025-1481`	6.5 Medium	Krzysztof Zając	No
2025-03-07 00:00	WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode WP-Recall <= 16.26.10	`CVE-2025-1324`	6.4 Medium	Krzysztof Zając	Yes
2025-03-07 00:00	Post Lockdown <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Post Disclosure Post Lockdown <= 4.0.2	`CVE-2025-1504`	4.3 Medium	Krzysztof Zając	Yes

Showing 1–10 of 464 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C