Artus KG

Support Genix Lite < 1.4.48 - Unauthenticated Arbitrary File Read via Path Traversal

Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Response

Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header

Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch

DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Disclosure via Unprotected Uploads Directory

DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Download via IDOR

YMC Filter < 3.12.9 - Author+ Stored XSS via SVG Icon Upload

miniOrange 2FA < 6.2.7 - 2FA Bypass via Password-Only Second-Factor Rebinding

LWS Optimize < 4.1.2 - Unauthenticated Stored XSS via Real User Monitoring

Slider Hero < 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider Handlers