Tonn

WordPress & WooCommerce Affiliate Program <= 8.4.1 - Authentication Bypass to Account Takeover and Privilege Escalation

Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation

WHMPress - WHMCS Client Area <= 4.3-revision-3- Authenticated (Subscriber+) Arbitrary Options Update

WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update

WP Video Robot <= 1.20.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update

WooEvents <= 4.1.2 - Unauthenticated Arbitrary File Overwrite

WP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File Upload

WP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File Upload

WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

DHVC Form <= 2.4.7 - Unauthenticated Privilege Escalation