AmrAwad

ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection

Wallet for WooCommerce <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'search[value]'

Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read

Product Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Read

LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration

CF7 Google Sheets Connector <= 5.0.9 - Missing Authorization to Limited Site Configuration Update

Tutor LMS <= 2.7.6 - User Registration Setting Bypass to Unauthorized User Registration

HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update

MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics <= 1.5.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update

Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update