← All credits
AmrAwad
30 vulnerability records and advisories credit this contributor.
CVE-2024-11642
Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion
CVE-2024-3235
Essential Grid <= 3.1.1 - Unauthenticated Private Post Disclosure
CVE-2024-10900
ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion
CVE-2024-2846
Visual Footer Credit Remover <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2024-3473
Header Footer Code Manager Pro <= 1.0.16 - Reflected Cross-Site Scripting via message
CVE-2024-13355
Admin and Customer Messages After Order for WooCommerce <= 13.2 - Authenticated (Subscriber+) Limited File Upload to Cross-Site Scripting
CVE-2024-6500
InPost for WooCommerce <= 1.4.0 and InPost PL <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary File Read and Delete
CVE-2024-3961
ConvertKit <= 2.4.9 - Missing Authorization
CVE-2024-4295
Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash
CVE-2024-2508
WP Mobile Menu <= 2.8.4.4 - Missing Authorization to _mobmenu_icon Post Meta Modification