Muhammad Zeeshan

Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter

Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter

Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition

Fancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

Networker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing Authorization

Responsive <= 5.0.2 - Missing Authorization to HTML Injection

Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting

Plugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor

Permalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification

Avada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entry