Benedictus Jovan

Reviews and Rating <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via sync_reviews AJAX Action

Generate Security.txt <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Security.txt Deletion via delete_securitytxt AJAX Action

WhatsOrder <= 1.0.1 - Unauthenticated Sensitive Information Exposure via Predictable Invoice File URLs

PeachPay <= 1.120.46 - Cross-Site Request Forgery to Stripe Unlink

Snippet Shortcodes <= 4.1.4 - Cross-Site Request Forgery

Custom Product List Table <= 3.0.0 - Cross-Site Request Forgery

Squelch Tabs and Accordions Shortcodes <= 0.4.7 - Cross-Site Request Forgery

Nafeza Prayer Time <= 1.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting

Comparison Slider <= 1.0.5 - Missing Authorization

Comparison Slider <= 1.0.5 - Cross-Site Request Forgery