Tonn

Biagiotti Membership <= 1.0.2 - Authentication Bypass via biagiotti_membership_check_facebook_user

Homey <= 2.4.2 - Unauthenticated Privilege Escalation in homey_save_profile

Croma Music <= 3.6 - Authenticated (Subscriber+) Arbitrary Options Update in ironMusic_ajax

Royal Core <= 2.9.2 - Authenticated (Subscriber+) Arbitrary Options Update

CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read

CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion

Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation in homey_register

Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

WP JobSearch <= 2.6.7 - Authentication Bypass to Account Takeover and Privilege Escalation

AdForest <= 5.1.6 - Privilege Escalation via Password Reset/Account Takeover