TANG Cheuk Hei

Temporary Login <= 1.0.0 - Authentication Bypass to Account Takeover

File Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Upload

Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads

File Manager Pro – Filester <= 1.8.5 - Authenticated (Administrator+) Local JavaScript File Inclusion

WPIDE <= 3.4.9 - Unauthenticated Full Path Dislcosure

Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read

File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload

File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload

Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload

Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload