dc11

SupportCandy < 3.1.7 - Subscriber+ SQLi

SupportCandy < 3.1.5 - Unauthenticated SQLi

ProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Reset

TF Random Numbers < 2.0.1 - Subscriber+ Arbitrary Option Update

WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect

WP Meta SEO < 4.5.3 - Subscriber+ SQLi

User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF

Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection

Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scripting

Print Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSS