ifoundbug

URL Shortener Plugin For WordPress <= 3.0.7 - Unauthenticated SQL Injection

Magic Login Mail or QR Code <= 2.05 - Unauthenticated Privilege Escalation via Insecure QR Code File Storage

Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File

Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post Disclosure

ShareThis Dashboard for Google Analytics <= 3.2.4 - Unauthenticated Google Analytics Data Exposure

File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure

Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injection

DocoDoco Store Locator <= 1.0.1 - Authenticated (Editor+) Arbitrary File Upload