Ramuel Gall

Build App Online <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism

FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation

FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Information Disclosure via Health Check

Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting

Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings

Bricks <= 1.8.1 - Cross-Site Request Forgery via save_settings

Tutor LMS <= 2.7.4 - Cross-Site Request Forgery via 'addon_enable_disable'

WordPress Core < 6.2.1 - Directory Traversal

WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_action

Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint