Tonn

AdForest <= 6.0.9 - Authentication Bypass to Admin

BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Deletion

BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Read

Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover

Zombify <= 1.7.5 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read

WordPress User Extra Fields <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields Function

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Deletion

Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback

Spirit Framework <= 1.2.14 - Authentication Bypass to Account Takeover and Privilege Escalation