dc11

UsersWP < 1.2.67 - Two-Factor Authentication Bypass

WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint

WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE

WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint

WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint

WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints

Woocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSS

WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS

Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

SupportCandy < 3.1.7 - Admin+ SQLi