← All credits
Tonn
89 vulnerability records and advisories credit this contributor.
CVE-2024-10801
WordPress User Extra Fields <= 16.5 - Unauthenticated Arbitrary File Upload
CVE-2024-10800
WordPress User Extra Fields <= 16.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
CVE-2024-10799
Eventer <= 3.9.7 - Authenticated (Subscriber+) Arbitrary File Read
CVE-2024-10627
WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Upload
CVE-2024-10626
WooCommerce Support Ticket System <= 17.7 - Authenticated (Subscriber+) Arbitrary File Deletion
CVE-2024-10625
WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Deletion
CVE-2024-10590
Opt-In Downloads <= 4.07 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-10589
Leopard <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
CVE-2024-10547
WP Membership <= 1.6.2 - Unauthenticated Arbitrary File Upload