← All credits
Villu Orav
19 vulnerability records and advisories credit this contributor.
CVE-2024-8852
All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs
CVE-2024-6828
Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting
CVE-2024-5941
GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletion
CVE-2024-5940
GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings Update
CVE-2024-5939
GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information Exposure
CVE-2024-5932
GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution
CVE-2024-4352
Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection
CVE-2024-4351
Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation
CVE-2024-4223
Tutor LMS <= 2.7.0 - Missing Authorization
CVE-2024-4222
Tutor LMS Pro <= 2.7.0 - Missing Authorization