Colin Xu

Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Form

LTL Freight Quotes – GlobalTranz Edition <= 2.3.12 - Missing Authorization to Unauthenticated Settings Update

Bounce Handler MailPoet 3 <= 1.3.21 - Reflected Cross-Site Scripting

Woo Manage Fraud Orders <= 2.6.1 - Reflected Cross-Site Scripting

BBP Core – Expand bbPress powered forums with useful features <= 1.2.5 - Reflected Cross-Site Scripting via add_query_arg Parameter

ElementInvader Addons for Elementor <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting

Quantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site Scripting

YML for Yandex Market <= 4.7.2 - Reflected Cross-Site Scripting

Products, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting