Drew Webber

FS Registration Password <= 1.0.1 - Unauthenticated Privilege Escalation via Account Takeover

AS Password Field In Default Registration Form <= 2.0.0 - Unauthenticated Privilege Escalation via Account Takeover

Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePassword

Optional Email <= 1.3.11 - Unauthenticated Privilege Escalation to Account Takeover

Pagelayer <= 2.0.9 - Incorrect Authorization to Authenticated (Contributor+) Mail Relay Configuration via 'contacts'

Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters

Media Sync <= 1.4.9 - Authenticated (Author+) Path Traversal via 'sub_dir' and 'media_items' Parameters

Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Backup Interception

Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Arbitrary File Read and Deletion

Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Export