Bob Matyas

Side Menu Lite < 4.2.1 - Menu Deletion via CSRF

ArtPlacer Widget < 2.21.2 - Subscriber+ Arbitrary Widget Deletion

ArtPlacer Widget < 2.21.2 - Stored XSS via CSRF

CITS Support svg, webp Media and TTF,OTF File Upload < 3.0 - Author+ Stored XSS via SVG

FTP Access <= 1.0 - Subscriber+ Stored XSS

Request a Quote < 2.4.1 - Admin+ Stored XSS

WpStickyBar <= 2.1.0 - Reflected XSS

Community Events < 1.5 - Event Deletion via CSRF

Send email only on Reply to My Comment <= 1.0.6 - Reflected XSS

WP eStore < 8.5.5 - Reflected XSS via $_SERVER['REQUEST_URI']