tmrswrr

My Auctions Allegro Plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection

AIO Forms <= 1.3.18 - Authenticated (Admin+) Arbitrary File Upload via Zip Import

WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function

CE Phoenix v3.0.1 Stored Cross-Site Scripting via admin/currencies.php

ElkArte Forum 1.1.9 Authenticated Remote Code Execution via Theme Upload

Multi Step Form <= 1.7.25 - Authenticated (Admin+) Arbitrary File Upload

Loaded Commerce 6.6 Client-Side Template Injection (CSTI)

Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL Injection

WP Directory Kit <= 1.4.6 - Authenticated (Admin+) SQL Injection

WP Directory Kit <= 1.4.7 - Unauthenticated SQL Injection