Marcin Dudek (dudekmar)

20252026

Critical

High

Medium

Low

Global Rank

#308

of 3,238 researchers

Vulns

15

Critical2

High4

Medium9

Low0

Affected Assets

15

15plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

15 records


2026-02-18 16:09	SEO Plugin by Squirrly SEO <= 12.4.14 - Missing Authorization to Authenticated (Subscriber+) Cloud Service Disconnection GEO Plugin by Squirrly SEO <= 12.4.14	`CVE-2025-14342`	4.3 Medium	Marcin Dudek (dudekmar)	Yes
2026-02-18 00:00	Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification Razorpay for WooCommerce <= 4.7.8	`CVE-2025-14294`	5.3 Medium	Marcin Dudek (dudekmar)	Yes
2026-02-10 12:36	SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter SlimStat Analytics <= 5.3.1	`CVE-2025-13431`	6.5 Medium	Marcin Dudek (dudekmar)	Yes
2026-01-06 20:40	Fluent Forms <= 6.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder Fluent Forms <= 6.1.7	`CVE-2025-13722`	5.3 Medium	Marcin Dudek (dudekmar)	Yes
2025-12-29 05:47	PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File PixelYourSite <= 11.1.5	`CVE-2025-14280`	5.3 Medium	Marcin Dudek (dudekmar)	Yes
2025-12-23 16:17	Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution Print Invoice & Delivery Notes for WooC… <= 5.8.0	`CVE-2025-13773`	9.8 Critical	shark3y	Yes
2025-12-20 14:15	Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure Post Grid Gutenberg Blocks <= 5.0.3	`CVE-2025-12980`	7.5 High	Marcin Dudek (dudekmar)	Yes
2025-12-18 18:13	Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.16 - Missing Authorization to Unauthenticated Sensitive Information Exposure Simply Schedule Appointments <= 1.6.9.16	`CVE-2025-13754`	5.3 Medium	Marcin Dudek (dudekmar)	Yes
2025-12-16 18:41	Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Unscoped Bearer Token Ninja Forms <= 3.13.2	`CVE-2025-11924`	7.5 High	Lucas Montes (NiRoX)	Yes
2025-12-16 18:33	Converter for Media <= 6.3.2 - Missing Authorization to Authenticated (Subscriber+) Optimized Image Deletion via regenerate-attachment REST Endpoint Converter for Media <= 6.3.2	`CVE-2025-13750`	4.3 Medium	Marcin Dudek (dudekmar)	Yes

Showing 1–10 of 15 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C