Ryan Kozak

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_image()

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Deletion

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Read

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file()

AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload

CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload

WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover

AI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read

Kalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action

g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure