Nguyen Tan Phat

Eleganzo <= 1.2 - Authenticated (Subscriber+) Arbitrary Directory Deletion

AdForest <= 6.0.12 - Authentication Bypass

Tutor LMS Pro <= 3.9.5 - Authentication Bypass via Social Login

Taxi Booking Manager for Woocommerce | E-cab <= 1.3.0 - Missing Authorization to Unauthenticated Privilege Escalation via Account Takeover

WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copy

Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization

Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection

Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion

Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 - Unauthenticated PHP Object Injection via verify_field_val Function

Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.2.3 - Unauthenticated PHP Object Injection via verify_field_val Function