vgo0

Toret Manager <= 1.2.7 - Authenticated (Subscriber+) Arbitrary Options Update via AJAX actions

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting

Advanced AJAX Product Filters <= 1.6.8.1 - Reflected Cross-Site Scripting

UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover

Download Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parameter

Bard <= 2.216 - Reflected Cross-Site Scripting via add_query_arg Parameter

Ashe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg Parameter