wesley

School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Arbitrary User Deletion

School Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover

KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter

Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP

AppPresser – Mobile App Framework <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting

WPCOM Member <= 1.7.5 - Authentication Bypass via 'user_phone'

Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via xoo_el_action Shortcode

Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure

WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP

WP-WebAuthn <= 1.3.4 - Unauthenticated Stored Cross-Site Scripting