Dmitrii Ignatyev

Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions

System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)

BetterDocs <= 4.3.3 - Authenticated (Contributor+) Sensitive Information Exposure

Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy

Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'

Query Monitor <= 3.20.3 - Reflected Cross-Site Scripting via Request URI

Spacious <= 1.9.11 - Missing Authorization to Autheticated (Subscriber+) Demo Data Import

Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Iframe Injection

Ninja Forms < 3.10.1 - Admin+ Stored XSS

Ninja Forms < 3.10.1 - Admin+ Stored XSS