Bob Matyas

Contact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']

WP Front User Submit < 5.0.0 - Open Redirect

Nexter Blocks < 5.0.2 - Author+ Stored XSS via SVG Upload

LiveJournal Shortcode <= 1.1.1 - Contributor+ Stored XSS via Shortcode

Base64 Encoder/Decoder <= 0.9.2 - Stored XSS via CSRF

Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF

Court Reservation < 1.10.9 - Event Deletion via CSRF

Conditional CAPTCHA <= 4.0.0 - Open Redirect

WP eCommerce <= 3.15.1 - Coupon Deletion via CSRF

Five Star Restaurant Reservations < 2.7.9 - Arbitrary Bookings Deletion via CSRF