Muhammad Zeeshan

Avada <= 7.11.6 - Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_action

Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing

Avada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Avada <= 7.11.5 - Authenticated(Contributor+) Sensitive Information Exposure via Form Entries

Avada | Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File Upload

Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting

Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Question Deletion

Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Submitted Response Deletion

Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Arbitrary Quiz Deletion and Copying

Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Mailchimp API Key