Felipe Caon

WP Hardening – Fix Your WordPress Security <= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumeration

Search Filter Pro < 2.5.18 - Admin+ Stored XSS

Simple Photoswipe <= 0.1 - Subscriber+ Arbitrary Settings Update

Responsive video embed < 0.5.1 - Contributor+ Stored XSS

Simple Photoswipe <= 0.1 - Admin+ Stored XSS

WP QuickLaTeX < 3.8.7 - Admin+ Stored XSS in Background Color field

If-So Dynamic Content Personalization < 1.8.0.3 - Contributor+ Shortcode Stored XSS

The Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event Disclosure

CM Email Registration Blacklist and Whitelist < 1.4.9 - Add/Delete Emails via CSRF Add and delete any item from blacklist/whitelist

CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF