Pedro Paniago

WooCommerce <= 9.0.2 - Unauthenticated HTML Injection

LearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scripting

LearnPress <= 4.2.6.3 - Insecure Direct Object Reference

Tutor LMS <= 2.6.0 - Missing Authorization

Tutor LMS <= 2.6.0 - Authenticated(Student+) HTML Injection via Q&A

weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer

The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in all versions up to, and including, 1.8.5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthent

Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting

Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting