Kenneth Dunn

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0.5.4 - 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation

Holiday class post calendar <= 7.1 - Unauthenticated Remote Code Execution via 'contents'

WP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload

KiotViet Sync <= 1.8.5 - Unauthenticated Webhook Key Exposure

KiotViet Sync <= 1.8.5 - Use of Hard-coded Password to Authorization Bypass

KiotViet Sync <= 1.8.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update

KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload

Elastic Theme Editor <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload

TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover

PDF Catalog for WooCommerce <= 1.1.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting