Jakub Herman

WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via Passkeys Provider

Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_args

WP Go Maps < 10.1.04 - Unauthenticated SQL Injection via Markers REST filter

Bookly < 27.8 - Unauthenticated SQL Injection via staff_id

Events Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration

All-in-One WP Migration and Backup < 7.106 - Unauthenticated Arbitrary-Location Log File Write via Path Traversal

Redux Framework < 4.5.13 - Subscriber+ Privilege Escalation to Administrator