JohSka

Appy Pie Connect for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password

Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.5.32 - Incorrect Authorization to Authenticated (Contributor+) Post Publication

Writeprint Stylometry <= 0.1 - Reflected Cross-Site Scripting via 'p' Parameter

WP Maps <= 4.9.1 - Unauthenticated SQL Injection via 'location_id' Parameter

Gutenberg Blocks by Kadence Blocks <= 3.5.32 - Missing Authorization

Ninja Forms <= 3.14.0 - Unauthenticated Information Disclosure in nf_ajax_submit AJAX Action

WP Frontend Profile <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection

Yoast Duplicate Post <= 4.5 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite

Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data

Simple User Registration <= 6.7 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field