Farid Narimanov

B2BKing < 5.2.40 - Unauthenticated B2B Group Assignment and Approval Bypass via Registration Role Selection

Stripe Payment Forms by WP Full Pay < 8.5.5 - Cross-Customer Subscription Cancellation via IDOR

WP OAuth Server < 6.3.1 - Unauthenticated OAuth Token and User Data Disclosure via Debug Log File

WPC Order Tip for WooCommerce < 3.3.1 - Unauthenticated Order Data Disclosure

WP Data Access < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass

Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure

Stripe Payment Forms by WP Full Pay < 8.5.2 - Unauthenticated Payment Intent Amount Manipulation

miniOrange 2FA < 6.2.8 - 2FA Bypass via Unlimited Second-Factor Attempts

Sunshine Photo Cart < 3.6.12 - Unauthenticated Private Gallery Comment Disclosure

Extra Product Options Builder for WooCommerce < 1.2.176 - Unauthenticated Customer File Disclosure via getpublicfileupload