Mike Gozdiskowski

Divi Dash < 1.0.7 - Unauthenticated Denial of Service via IP Address Spoofing

WooCommerce Online Product Designer 1.7.0 - < 2.15.0 - Unauthenticated Arbitrary File Upload

Choose User Role at Registration for WooCommerce < 1.3.3 - Unauthenticated Privilege Escalation via Registration Role Request

Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload

Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server

Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal

Zportals < 6.3.4 - Subscriber+ Arbitrary File Upload

MonsterInsights Pro 10.2.0/10.2.2 - Backdoored via AWS S3 bucket compromise

WPMU DEV Dashboard < 5.0.1 - Remote Code Execution via Hub Install Action

WooCommerce Bookings < 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization