Nabil Irawan

Auto Save Remote Images (Drafts) <= 1.0.9 - Authenticated (Contributor+) Server-Side Request Forgery

Theme Importer <= 1.0 - Cross-Site Request Forgery

Ultimate Multi Design Video Carousel <= 1.4 - Authenticated (Editor+) Stored Cross-Site Scripting

Restore Permanently delete Post or Page Data <= 1.0 - Cross-Site Request Forgery

Silencesoft RSS Reader <= 0.6 - Cross-Site Request Forgery to RSS Feed Deletion

Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter

PopAd <= 1.0.4 - Cross-Site Request Forgery to Settings Update

Link Shield <= 0.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Pinterest Site Verification plugin using Meta Tag <= 1.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_var'

Vagaro Booking Widget <= 0.3 - Unauthenticated Stored Cross-Site Scripting via 'vagaro_code'