wesley

Elementor Header & Footer Builder <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title Widget

miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication Bypass

Social Login <= 5.9.0 - Authentication Bypass via Disqus OAuth provider

MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation

Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and Creation

Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider

OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass

Loginizer Security and Loginizer <= 1.9.2 - Authentication Bypass via WordPress.com OAuth provider

Heateor Social Login WordPress <= 1.1.35 - Authentication Bypass via Disqus OAuth provider

Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting