Francesco Carlucci

Page Restrict <= 2.5.5 - Protection Mechanism Bypass

Comments Extra Fields For Post,Pages and CPT <= 5.0 - Missing Authorization

Comments Extra Fields For Post,Pages and CPT <= 5.0 - Cross-Site Request Forgery

Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure

Full Screen Menu for Elementor <= 1.0.7 - Authenticated (Contributor+) Post Disclosure

Modal Popup Box – Popup Builder, Show Offers And News in Popup <= 1.5.2 - Authenticated (Contributor+) PHP Object Injection in awl_modal_popup_box_shortcode

Aqua SVG Sprite <= 3.0.14 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Where Did You Hear About Us Checkout Field for WooCommerce <= 1.3.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting

AADMY – Add Auto Date Month Year Into Posts <= 2.0.1 - Unauthenticated Arbitrary Shortcode Execution

Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload