Jakub Herman

Comments – wpDiscuz < 7.6.66 - Unauthenticated Comment Disclosure via SQLi

Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action

Theme My Login 7.0 - 7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation

MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution via Completion Message Merge Tags

Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing

Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms

Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal

Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite

Defender Security < 6.2.0 - Admin+ Network-Wide RCE via Hub Connector on Multisite

WP Fastest Cache 0.9.0.3 - 1.5.0 - Unauthenticated Stored XSS via Host Header Cache Poisoning