Shikhali Jamalzade

GDPR Data Request Form 1.5 - 1.7.1 - DPO Email Update via CSRF

Ultimate Gift Cards for WooCommerce < 3.2.10 - Subscriber+ Gift Card Theft and Destruction via Unauthorized Redemption

CatalogX < 6.1.3 - Unauthenticated Email Content Injection via Shared Transient

MultiVendorX 5.0.13 - 5.0.14 - Unauthenticated Vendor PII and Payout Data Disclosure via stores REST Endpoint

CatFolders Document Gallery Pro < 2.0.7 - Unauthenticated Missing Authorization via download-all

Notifima < 3.1.4 - Subscriber+ Stock Alert Unsubscription via IDOR

Finale Lite < 2.21.0 - Subscriber+ Campaign Configuration Disclosure via wcct_quick_view_html

StoreGrowth: Smart Sales Booster for WooCommerce < 2.1.2 - Unauthenticated Arbitrary Price Manipulation via BOGO Add-to-Cart

LearnPress – Sepay Payment < 4.0.3 - Unauthenticated Order Status Disclosure

Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR