0xBassia

Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via Webhook

Advanced Customized Prompts <= 1.0.1 - Subscriber+ WooCommerce Order Item Metadata Tampering

Advanced Customized Prompts <= 1.0.1 - Subscriber+ Stored XSS via Product Popup Configuration

Advanced Customized Prompts <= 1.0.1 - Unauthenticated Account Takeover

Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Order Data Disclosure

Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Arbitrary File Upload

Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Account Takeover

Authora - Easy Login with Mobile Number < 1.7.7 - Unauthenticated Account Takeover via OTP Disclosure

Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload

Fediverse Embeds < 1.5.8 - Unauthenticated SSRF via Site Info Endpoint