Ivan Cese

Ninja Countdown <= 1.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Countdown Deletion

RandomQuotr <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting

Squirrels Auto Inventory <= 1.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting

Fleet Manager <= 2.5.1 - Authenticated (Editor+) Stored Cross-Site Scripting

Solutions Ad Manager <= 1.0.0 - Unauthenticated Open Redirect via 'sam-redirect-to' Parameter

Visitor Logic Lite <= 1.0.3 - Unauthenticated PHP Object Injection via 'lpblocks' Cookie

CSV to SortTable <= 4.2 - Contributor+ LFI

Simple CSV Table <= 1.0.1 - Directory Traversal to Authenticated (Contributor+) Arbitrary File Read

Shortcode Loader <= 1.0 - Unauthenticated Arbitrary Shortcode Execution via 'code' Parameter

Career Section <= 1.6 - Cross-Site Request Forgery to Arbitrary File Deletion