Marcin Dudek

Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure

FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.5 - Unauthenticated SQL Injection

Booking Calendar <= 10.14.8 - Unauthenticated SQL Injection via dates_to_check

OneSignal – Web Push Notifications <= 3.6.1 - Missing Authorization to Unauthenticated Plugin Settings Update

PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File

Converter for Media <= 6.3.2 - Missing Authorization to Authenticated (Subscriber+) Optimized Image Deletion via regenerate-attachment REST Endpoint

Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Unscoped Bearer Token

SEO Plugin by Squirrly SEO <= 12.4.14 - Missing Authorization to Authenticated (Subscriber+) Cloud Service Disconnection

Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification

Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution