Friderika Baranyai

Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation

User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration

Ovatheme Events Manager <= 1.8.6 - Missing Authorization

LoginPress Pro <= 5.0.1 - Authentication Bypass via WordPress.com OAuth provider

Ovatheme Events Manager <= 1.8.5 - Unauthenticated Arbitrary File Upload

WPGYM <= 67.7.0 - Missing Authorization to Admin Account Creation

School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload

Service Finder SMS System <= 2.0.0 - Authentication Bypass

Service Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation

Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password