Tonn

WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation

DesignThemes Core Features <= 4.7 - Missing Authorization to Unauthenticated Arbitrary File Read via dt_process_imported_file

ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data

Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover

Service Finder Bookings <= 5.0 - Unauthenticated Privilege Escalation via Account Takeover

Industrial <= 1.7.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Adifier System <= 3.1.7 - Unauthenticated Arbitrary Password Reset

Altair <= 5.2.4 - Unauthenticated Arbitrary Options Update via pp_import_current

Apus Framework <= 2.4 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options

BoomBox Theme Extensions <= 1.8.0 - Authenticated (Subscriber+) Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_password