Benedictus Jovan

Pricing Table <= 2.0.1 - Missing Authorization

Pocket News Generator <= 0.2.0 - Cross-Site Request Forgery to Settings Update

ADFO – Custom data in admin dashboard <= 1.9.0 - Cross-Site Request Forgery

Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor <= 4.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting

SVS Pricing Tables <= 1.0.4 - Cross-Site Request Forgery to Pricing Table Edit/Creation

hostel <= 1.1.5.3 - Cross-Site Request Forgery

WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage()

Bulk Posts Editing For WordPress <= 4.2.3 - Authenticated (Subscriber+) Missing Authorization

SVS Pricing Tables <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting

Fetch JFT <= 1.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting